PT-2006-5437 · Amazing Little · Amazing Little Picture Poll+1

Alperen + 1 · Published 2006-09-09 · Updated 2018-10-17 · CVE-2006-4652

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Amazing Little Poll versions (affected versions not specified) Amazing Little Picture Poll versions (affected versions not specified)

Description The issue concerns default passwords in the software, allowing remote attackers to create new polls by entering these default credentials. Specifically, the default password "dsapoll" can be used to access the system via the lp admin.php endpoint, enabling unauthorized creation of polls.

Recommendations For Amazing Little Poll, change the default password "dsapoll" to a unique and secure password. For Amazing Little Picture Poll, change the default password "dsapoll" to a unique and secure password. As a temporary workaround, consider restricting access to the lp admin.php endpoint until secure passwords are implemented.

Fix

Related Identifiers

CVE-2006-4652

Affected Products

Amazing Little Picture Poll

Amazing Little Poll

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2006-4652 · Security Note
• http://securityfocus.com/archive/1/445081/100/0/threaded · Note
• http://securityreason.com/securityalert/1527 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/28737 · Note
• http://securityfocus.com/bid/19837 · Note