CVE-2006-4653
No CVSS score yet. EPSS 1.5% chance of exploitation in the next 30 days.
(1) Amazing Little Poll and (2) Amazing Little Picture Poll store sensitive information under the web root with insufficient access control, which allows remote attackers to read the admin password via a direct request for the lp_settings file (lp_settings.inc or lp_settings.php).
- EPSS
- 1.5% chance of exploitation in the next 30 days; higher than 74% of CVEs (scores of 2026-10-31)
- Published
- Modified
- Record from
- the NVD, synced
Affected
- amazing_little_picture_poll:amazing_little_picture_poll
- amazing_little_poll:amazing_little_poll