CVE-2000-0590

Poll It 2.0 - Unauthenticated Arbitrary File Read via data_dir Parameter

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2000-0590. PoCs published by Adrian Daminato.

AI-analyzed exploit summary This exploit leverages a variable overwrite vulnerability in Poll It, a Perl CGI application, by manipulating the 'data_dir' parameter via a GET request to read arbitrary files, such as '/etc/passwd'. The vulnerability arises due to insecure handling of user-supplied input.

Description

Poll It 2.0 CGI script allows remote attackers to read arbitrary files by specifying the file name in the data_dir parameter.

Exploits (1)

exploitdb WORKING POC VERIFIED
by Adrian Daminato · textremotecgi
https://www.exploit-db.com/exploits/20059

This exploit leverages a variable overwrite vulnerability in Poll It, a Perl CGI application, by manipulating the 'data_dir' parameter via a GET request to read arbitrary files, such as '/etc/passwd'. The vulnerability arises due to insecure handling of user-supplied input.

Classification
Working Poc 90%
Attack Type
Info Leak
Complexity
Trivial
Reliability
Reliable
Target: Poll It SSI v2.0
No auth needed
Prerequisites: Target must have Poll It SSI v2.0 installed and accessible via CGI
mistral-large-3 · analyzed Feb 16, 2026 Full analysis →

References (3)

Core 3
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/4878
Patch, Vendor Advisory vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/1431
Patch, Vendor Advisory mailing-list x_refsource_bugtraq
http://archives.neohapsis.com/archives/bugtraq/2000-07/0076.html

Scores

EPSS 0.0690
EPSS Percentile 93.4%

Details

Status published
Products (1)
cgi-world/poll_it 2.0
Published Jul 04, 2000
Tracked Since Feb 18, 2026