CVE

Id
20757  
CVE No.
CVE-2006-4653  
Status
Candidate  
Description
(1) Amazing Little Poll and (2) Amazing Little Picture Poll store sensitive information under the web root with insufficient access control, which allows remote attackers to read the admin password via a direct request for the lp_settings file (lp_settings.inc or lp_settings.php).  
Phase
Assigned (20060908)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
196193 20757 CVE-2006-4653 BUGTRAQ:20060904 The Amazing Little Poll Admin Pwd  View
196194 20757 CVE-2006-4653 URL:http://www.securityfocus.com/archive/1/archive/1/445081/100/0/threaded  View
196195 20757 CVE-2006-4653 BID:19837  View
196196 20757 CVE-2006-4653 URL:http://www.securityfocus.com/bid/19837  View
196197 20757 CVE-2006-4653 VUPEN:ADV-2006-3687  View
196198 20757 CVE-2006-4653 URL:http://www.vupen.com/english/advisories/2006/3687  View
196199 20757 CVE-2006-4653 SECUNIA:21997  View
196200 20757 CVE-2006-4653 URL:http://secunia.com/advisories/21997  View
196201 20757 CVE-2006-4653 SREASON:1527  View
196202 20757 CVE-2006-4653 URL:http://securityreason.com/securityalert/1527  View
196203 20757 CVE-2006-4653 XF:alpoll-admin-auth-bypass(28737)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
58340 JVNDB-2006-000536 Sun Solaris の libX11 ライブラリにおけるバッファオーバーフローの脆弱性 Sun Solaris に含まれる libX11 ライブラリには、_XKB_CHARSET 環境変数に対するチェックに不備が存在するため、特定の環境においてバッファオーバーフローが発生する脆弱性が存在します。 CVE-2006-4655 20757 4.6 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000536.html  View