CVE-2006-4652

CVE-2006-4652 affects the applications Amazing Little Poll and Amazing Little Picture Poll, which ship with a default password of dsapoll. This allows remote attackers to create a new poll by submitting default credentials through lp_admin.php. The known entry provides a basic description and CVS...

CVE-2006-4653: Undefined Security Weakness

1 Amazing Little Poll and 2 Amazing Little Picture Poll store sensitive information under the web root with insufficient access control, which allows remote attackers to read the admin password via a direct request for the lpsettings file lpsettings.inc or lpsettings.php...

CVE-2006-4652: Undefined Security Weakness

1 Amazing Little Poll and 2 Amazing Little Picture Poll have a default password of "dsapoll", which allows remote attackers to create a new poll by entering default credentials via lpadmin.php...

CVE-2006-4653

The CVE-2006-4653 entry concerns two WordPress-like poll components, “Amazing Little Poll” and “Amazing Little Picture Poll,” which expose the admin password by serving the lp_settings files (lp_settings.inc or lp_settings.php) from the web root due to insufficient access control. The vulnerabili...