NVD

Id
63286  
Name
CVE-2006-4653  
Description
(1) Amazing Little Poll and (2) Amazing Little Picture Poll store sensitive information under the web root with insufficient access control, which allows remote attackers to read the admin password via a direct request for the lp_settings file (lp_settings.inc or lp_settings.php).  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2016-12-20  
Published
2006-09-08  
Modified Date
2016-11-18  
Seq
2006-4653  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
329760 63286 CVE-2006-4653 1527  View
329761 63286 CVE-2006-4653 20060904 The Amazing Little Poll Admin Pwd  View
329762 63286 CVE-2006-4653 19837  View
329763 63286 CVE-2006-4653 ADV-2006-3687  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
58954 JVNDB-2006-001220 Amazing Little Poll における admin パスワードを読まれる脆弱性 (1) Amazing Little Poll および (2) Amazing Little Picture Poll には、不十分なアクセスコントロールで Web ルート下に重要な情報を保存するため、admin パスワードを読まれる脆弱性が存在します。 CVE-2006-4653 20755 CVE-2006-4653 63286 5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-001220.html 2006-09-08 2012-06-26 View