CVE-2003-1180 - CVE House

Back to Database

Status published High CVE-2003-1180

Directory traversal vulnerability in Advanced Poll 2.0.2 allows remote attackers...

7.5 CVSS

Vulnerability Description

Directory traversal vulnerability in Advanced Poll 2.0.2 allows remote attackers to read arbitrary files or inject arbitrary local PHP files via .. sequences in the base_path or pollvars[lang] parameters to the admin files (1) index.php, (2) admin_tpl_new.php, (3) admin_tpl_misc_new.php, (4) admin_templates_misc.php, (5) admin_templates.php, (6) admin_stats.php, (7) admin_settings.php, (8) admin_preview.php, (9) admin_password.php, (10) admin_logout.php, (11) admin_license.php, (12) admin_help.php, (13) admin_embed.php, (14) admin_edit.php, or (15) admin_comment.php.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2003-1180

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

More from advanced poll

View All →

admin/index.php in Advanced Poll 2.0.0 through 2.0.5-dev allows remote attackers...

include/class_poll.php in Advanced Poll 2.0.4 uses the HTTP_X_FORWARDED_FOR (X-Forwarded-For HTTP...

SQL injection vulnerability in include/class_poll.php in Advanced Poll 2.0.4 allows...

Multiple cross-site scripting (XSS) vulnerabilities in Advanced Poll 2.02 allow...

Multiple SQL injection vulnerabilities in Advanced Poll 2.02 allow remote...

Affected Vendor

advanced poll

View all reports →

Affected Software

advanced poll

Vulnerable Versions:

2.0.0, 2.0.1, 2.0.2

Timeline

Official Publish: May 10th, 2005

Last Modified: August 8th, 2024

Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.