Vulnerabilidade de bypass de autenticação em Amazing Little Poll

The impact of this vulnerability is severe. An attacker can leverage it to completely compromise the poll system's administrative interface. This grants them full control over the poll's configuration, data, and potentially the underlying server if the poll has elevated privileges. Attackers could modify poll questions, results, user accounts, and even inject malicious code. The blast radius extends to all users who interact with the poll, as their data and privacy are at risk. This vulnerability is particularly concerning given the potential for widespread use of the plugin in various online platforms.

Websites and applications utilizing the Amazing Little Poll plugin, particularly those running versions 1.3 and 1.4, are at significant risk. Shared hosting environments are especially vulnerable, as they often lack granular control over individual plugin configurations. Sites with weak access controls or outdated security practices are also at increased risk.

• php / web:

curl -I 'http://your-website.com/lp_admin.php?adminstep='

If the response code is 200, it indicates the vulnerability may be present. • generic web:

grep -r 'lp_admin.php?adminstep=' /var/log/apache2/access.log

Look for requests to lp_admin.php?adminstep= without authentication headers. • php / web:

find /var/www/html -name 'lp_admin.php' -print

Verify the file exists and check its permissions to ensure it is not publicly accessible.

1. 2023-12-20Disclosure

   disclosure

1. Reservado2023-12-13
2. Publicada2023-12-20
3. Modificada2024-09-16
4. EPSS atualizado2026-04-02

The primary mitigation is to immediately upgrade Amazing Little Poll to version 1.4.1 or later. If upgrading is not immediately feasible due to compatibility issues or breaking changes, consider implementing a temporary workaround by restricting access to the lpadmin.php file using your web server's configuration (e.g., .htaccess for Apache). This can be achieved by denying access to the file for all but authorized users. Monitor access logs for suspicious requests targeting lpadmin.php with unusual parameters. After upgrading, confirm the vulnerability is resolved by attempting to access the admin panel without authentication.