TI-2023-06184 CVE-2023-6768 · GHSA-vh8w-6548-fp72
Improper authentication in Amazing Little poll
Priority MEDIUM 51
Authentication bypass vulnerability in Amazing Little Poll affecting versions 1.3 and 1.4.
Amazing Little poll
Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9
Exploited now
Amazing Little poll records in CISA KEVNo Amazing Little poll vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
4 records
TI-2006-04498 CVE-2006-4652 · GHSA-rq5w-p2gm-h2gp
(1) Amazing Little Poll and (2) Amazing Little Picture Poll have a default password of…
Priority LOW 36
(1) Amazing Little Poll and (2) Amazing Little Picture Poll have a default password of "dsapoll", which allows remote attackers to create a new poll by entering default credentials via lp_admin.php.
TI-2023-06185 CVE-2023-6769 · GHSA-qqjp-9v49-7wjf
Cross-site scripting in Amazing Little poll
Priority LOW 30
Stored XSS vulnerability in Amazing Little Poll, affecting versions 1.3 and 1.4.
TI-2006-04499 CVE-2006-4653 · GHSA-jq2c-h7rf-x4g4
(1) Amazing Little Poll and (2) Amazing Little Picture Poll store sensitive information…
Priority LOW 26
(1) Amazing Little Poll and (2) Amazing Little Picture Poll store sensitive information under the web root with insufficient access control, which allows remote attackers to read the admin password via a direct request f…