Simple Poll PHP Default Administrator Password Vulnerability

Bugtraq ID:	18486
Class:	Access Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Jun 16 2006 12:00AM
Updated:	Jun 19 2006 03:40PM
Credit:	AlpEren and tugr@ are credited with the discovery of this vulnerability.
Vulnerable:	cgixp.tk Simple PHP Poll 0
Not Vulnerable:

Simple Poll PHP Default Administrator Password Vulnerability

Simple PHP Poll is prone to an authentication-bypass vulnerability. The issue occurs because the administrator password is hardcoded into the application.

An attacker can exploit this issue to bypass authentication and gain access to the affected application's administrative section. This could aid in further attacks on the affected computer.

Simple Poll PHP Default Administrator Password Vulnerability

This issue can be exploited through a web client.

Simple Poll PHP Default Administrator Password Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected]

Simple Poll PHP Default Administrator Password Vulnerability

References:

• Simple PHP Poll Web Site (Simple PHP Poll )
  
• Simple PHP Poll Authecnication Admin ByPass ([email protected])