CVE-2006-4653: Undefined Security Weakness

1 Amazing Little Poll and 2 Amazing Little Picture Poll store sensitive information under the web root with insufficient access control, which allows remote attackers to read the admin password via a direct request for the lpsettings file lpsettings.inc or lpsettings.php...

CVE-2006-4653

The CVE-2006-4653 entry concerns two WordPress-like poll components, “Amazing Little Poll” and “Amazing Little Picture Poll,” which expose the admin password by serving the lp_settings files (lp_settings.inc or lp_settings.php) from the web root due to insufficient access control. The vulnerabili...