Security Advisory
CVE-2002-0589
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
PVote before 1.9 allows remote attackers to change the administrative password and gain privileges by directly calling ch_info.php with the newpass and confirm parameters both set to the new password.