Authentication bypass vulnerability in Amazing Little Poll affecting versions 1.3 and 1.4. This vulnerability could allow an unauthenticated user to access the admin panel without providing any credentials by simply accessing the "lp_admin.php?adminstep=" parameter.
References
| Link | Resource |
|---|---|
| https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-amazing-little-poll | Third Party Advisory |
Configurations
Configuration 1 (hide)
|
History
22 Dec 2023, 09:58
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-amazing-little-poll - Third Party Advisory | |
| First Time |
Mr-corner amazing Little Poll
Mr-corner |
|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 9.8 |
| CPE | cpe:2.3:a:mr-corner:amazing_little_poll:1.3:*:*:*:*:*:*:* cpe:2.3:a:mr-corner:amazing_little_poll:1.4:*:*:*:*:*:*:* |
20 Dec 2023, 10:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-12-20 10:15
Updated : 2023-12-22 09:58
NVD link : CVE-2023-6768
Mitre link : CVE-2023-6768
JSON object : View
Products Affected
mr-corner
- amazing_little_poll
CWE
CWE-287
Improper Authentication