Poll It 2.01 - Unauthenticated Admin Access via Password Parameter Bypass
pollit.cgi in Poll It 2.01 and earlier allows remote attackers to access administrative functions without knowing the real password by specifying the same value to the entered_password and admin_password parameters.