CVE-2002-0588: Steve Korbett Pvote

Medium severity, CVSS 5.0. EPSS: 6.6% chance of exploitation in the next 30 days.

PVote before 1.9 does not authenticate users for restricted operations, which allows remote attackers to add or delete polls by modifying parameters to (1) add.php or (2) del.php.

Affected products

• Steve Korbett Pvote: version 1.0 only; version 1.0a only; version 1.0b only; version 1.5 only

Published 2002-06-18. Last modified 2026-06-16.