TI-2023-06185 CVE-2023-6769 · GHSA-qqjp-9v49-7wjf
Cross-site scripting in Amazing Little poll
Priority LOW 30
Stored XSS vulnerability in Amazing Little Poll, affecting versions 1.3 and 1.4.
4 records
Stored XSS vulnerability in Amazing Little Poll, affecting versions 1.3 and 1.4.
Authentication bypass vulnerability in Amazing Little Poll affecting versions 1.3 and 1.4.
(1) Amazing Little Poll and (2) Amazing Little Picture Poll store sensitive information under the web root with insufficient access control, which allows remote attackers to read the admin password via a direct request f…
(1) Amazing Little Poll and (2) Amazing Little Picture Poll have a default password of "dsapoll", which allows remote attackers to create a new poll by entering default credentials via lp_admin.php.