CVE-2009-3596

CVE-2009-3596 describes an authentication bypass vulnerability in JoxTechnology Ajox Poll, specifically affecting the admin/managepoll.php script. This flaw allows unauthenticated remote attackers to gain administrative access by directly requesting the vulnerable page. With a CVSS score of 7.5, this high-severity vulnerability is easily exploitable over the network with low attack complexity, potentially leading to full compromise of confidentiality, integrity, and availability. While not listed in CISA's KEV catalog, public exploit code exists on ExploitDB, though there is no evidence of active exploitation or significant community discussion.