CVE-2007-0845: admin/index.php in Advanced Poll 2.0.0 through 2.0.5-dev allows remote attackers to bypass authentication a...

Security readout for executives and security teams

CVE-2007-0845 is an authentication bypass in Advanced Poll. An attacker who obtains a valid session identifier may be able to gain administrator privileges by manipulating a user identifier parameter. The sources do not provide CVSS, a vendor fix, or evidence of active exploitation, but a public exploit reference exists. Exposure is likely limited to legacy sites still running Advanced Poll 2.0.0 through 2.0.5-dev, especially if the admin interface is internet-accessible. Modern environments are exposed only if this old package remains embedded in a web application. Treat this as high priority only if Advanced Poll is present. The vulnerability can lead to administrator control, but the product is old and exposure should be confirmed before broad escalation. Mitigation focus: Check vendor or trusted advisory sources for a fixed release or replacement path.; Retire or replace unsupported Advanced Poll deployments if no maintained fix exists.; Restrict public access to Advanced Poll administration while remediation is assessed..

Prepared

Jun 29, 2026, 07:36 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.