CVE-2023-6768
Authentication bypass vulnerability in Amazing Little Poll
- State
- Published
- Severity
- 9.4 Critical
- Published
- Dec 20, 2023
- Updated
- Sep 16, 2024
- Reserved
- Dec 13, 2023
Description
Authentication bypass vulnerability in Amazing Little Poll affecting versions 1.3 and 1.4. This vulnerability could allow an unauthenticated user to access the admin panel without providing any credentials by simply accessing the "lp_admin.php?adminstep=" parameter.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 9.4 Critical | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L | INCIBE |
Weaknesses
- CWE-287 Improper Authentication
Affected Products
| Product | Versions |
|---|---|
Amazing Little pollAmazing Little poll |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.