Advanced Poll 2.0.2 allows remote attackers to obtain sensitive information via an HTTP request to info.php, which invokes the phpinfo() function.

Threat-Mapped Scoring

Score: 3.0

Priority: P2 - Serious (High)

• S1 – Steal Customer Account Information

EPSS

Score: 0.0754
Percentile: 0.91374

CVSS Scoring

Affected Products

• cpe:2.3:a:advanced_poll:advanced_poll:2.0.2:*:*:*:*:*:*:*

← Back to Home