{
    "id": "CVE-2007-4101",
    "published": "2007-07-31 10:17:00",
    "last_modified": "2026-06-16 22:43:24",
    "cvss_score": "6.8",
    "cvss_severity": "MEDIUM",
    "cvss_version": "2.0",
    "cvss_vector": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
    "cwe": null,
    "description": "Multiple PHP remote file inclusion vulnerabilities in Madoa Poll 1.1 allow remote attackers to execute arbitrary PHP code via the Madoa parameter to (1) index.php, (2) vote.php, and (3) admin.php.",
    "epss_score": "0.02909",
    "epss_percentile": "0.86527",
    "kev": 0,
    "kev_due": null,
    "has_exploit": 1,
    "updated_at": "2026-10-05 18:17:06",
    "priority": {
        "rank": 2,
        "label": "Patch early",
        "why": "A public exploit exists."
    },
    "products": [
        {
            "vendor": "global_centre",
            "product": "aplomb_poll"
        }
    ],
    "kev_detail": null,
    "exploits": [
        {
            "source": "exploit-db",
            "ref_id": "30436",
            "title": "Global Centre Aplomb Poll 1.1 - 'index.php?Madoa' Remote File Inclusion",
            "date": "2007-07-30",
            "url": "https://www.exploit-db.com/exploits/30436"
        },
        {
            "source": "exploit-db",
            "ref_id": "30437",
            "title": "Global Centre Aplomb Poll 1.1 - 'vote.php?Madoa' Remote File Inclusion",
            "date": "2007-07-30",
            "url": "https://www.exploit-db.com/exploits/30437"
        },
        {
            "source": "exploit-db",
            "ref_id": "30438",
            "title": "Global Centre Aplomb Poll 1.1 - 'admin.php?Madoa' Remote File Inclusion",
            "date": "2007-07-30",
            "url": "https://www.exploit-db.com/exploits/30438"
        }
    ],
    "refs_list": [
        "http://osvdb.org/37262",
        "http://osvdb.org/37263",
        "http://osvdb.org/37264",
        "http://securityreason.com/securityalert/2937",
        "http://www.attrition.org/pipermail/vim/2007-July/001739.html",
        "http://www.securityfocus.com/archive/1/475096/100/0/threaded",
        "http://www.securityfocus.com/bid/25138",
        "http://osvdb.org/37262",
        "http://osvdb.org/37263",
        "http://osvdb.org/37264",
        "http://securityreason.com/securityalert/2937",
        "http://www.attrition.org/pipermail/vim/2007-July/001739.html",
        "http://www.securityfocus.com/archive/1/475096/100/0/threaded",
        "http://www.securityfocus.com/bid/25138"
    ]
}