CVE-2006-4653
(1) Amazing Little Poll and (2) Amazing Little Picture Poll store sensitive information under the...
(1) Amazing Little Poll and (2) Amazing Little Picture Poll store sensitive information under the web root with insufficient access control, which allows remote attackers to read the admin password via a direct request for the lp_settings file (lp_settings.inc or lp_settings.php).
Exploit likelihood
What each source reports
NVD Score used
(1) Amazing Little Poll and (2) Amazing Little Picture Poll store sensitive information under the web root with insufficient access control, which allows remote attackers to read the admin password via a direct request for the lp_settings file (lp_settings.inc or lp_settings.php).
- Record
CVE-2006-4653- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:P/I:N/A:N - Updated
- 2026-11-02
CVE List No score
(1) Amazing Little Poll and (2) Amazing Little Picture Poll store sensitive information under the web root with insufficient access control, which allows remote attackers to read the admin password via a direct request for the lp_settings file (lp_settings.inc or lp_settings.php).
- Record
CVE-2006-4653- Updated
- 2026-11-02
EUVDEUVD-2006-4641 No score
(1) Amazing Little Poll and (2) Amazing Little Picture Poll store sensitive information under the web root with insufficient access control, which allows remote attackers to read the admin password via a direct request for the lp_settings file (lp_settings.inc or lp_settings.php).
- Record
EUVD-2006-4641- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-jq2c-h7rf-x4g4 No score
(1) Amazing Little Poll and (2) Amazing Little Picture Poll store sensitive information under the...
(1) Amazing Little Poll and (2) Amazing Little Picture Poll store sensitive information under the web root with insufficient access control, which allows remote attackers to read the admin password via a direct request for the lp_settings file (lp_settings.inc or lp_settings.php).
- Record
GHSA-jq2c-h7rf-x4g4- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2006-4653 is a medium vulnerability (CVSS 5.0) in Amazing Little Picture Poll Little Picture Poll, published September 9, 2006. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.53%, the 74th percentile. No source names a fixed version.
References
securityfocus.com/bid/19837
securityreason.com/securityalert/1527
secunia.com/advisories/21997
vupen.com/english/advisories/2006/3687
exchange.xforce.ibmcloud.com/vulnerabilities/28737
nvd.nist.gov/vuln/detail/CVE-2006-4653
github.com/advisories/GHSA-jq2c-h7rf-x4g4