CVEvulnerability

CVE-2023-6768

9.8 CRITICAL Published 2023-12-20 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2023-12-20
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
9.4 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L
CVSS 3.1 ([email protected])
9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-287

Description

Authentication bypass vulnerability in Amazing Little Poll affecting versions 1.3 and 1.4. This vulnerability could allow an unauthenticated user to access the admin panel without providing any credentials by simply accessing the "lp_admin.php?adminstep=" parameter.

Affected configurations

• mr-corner amazing little poll 1.3 • mr-corner amazing little poll 1.4

Related

Weakness · CWE (1)

  • CWE-287 Improper Authentication weakness

References