Description
(1) Amazing Little Poll and (2) Amazing Little Picture Poll have a default password of "dsapoll", which allows remote attackers to create a new poll by entering default credentials via lp_admin.php.
References
- 19837 vdb-entry
- 20060904 The Amazing Little Poll Admin Pwd mailing-list
- 1527 third-party-advisory
- alpoll-admin-auth-bypass(28737) vdb-entry