CVE-2003-1180: Advanced Poll

High severity, CVSS 7.5. EPSS: 1.7% chance of exploitation in the next 30 days.

Directory traversal vulnerability in Advanced Poll 2.0.2 allows remote attackers to read arbitrary files or inject arbitrary local PHP files via .. sequences in the base_path or pollvars[lang] parameters to the admin files (1) index.php, (2) admin_tpl_new.php, (3) admin_tpl_misc_new.php, (4) admin_templates_misc.php, (5) admin_templates.php, (6) admin_stats.php, (7) admin_settings.php, (8) admin_preview.php, (9) admin_password.php, (10) admin_logout.php, (11) admin_license.php, (12) admin_help.php, (13) admin_embed.php, (14) admin_edit.php, or (15) admin_comment.php.

Affected products

• Advanced Poll Advanced Poll: version 2.0.0 only; version 2.0.1 only; version 2.0.2 only

Published 2003-12-31. Last modified 2026-06-16.