CVE-2006-4487

CVE-2006-4487 describes an information disclosure vulnerability in DUware DUpoll versions 3.0 and 3.1, where the _private/Dupoll.mdb file, containing sensitive data like usernames and passwords, is stored under the web document root with inadequate access controls. This allows unauthenticated remote attackers to easily access this information. The vulnerability has a CVSS score of 5.0, indicating a medium severity, and is considered low complexity to exploit with a partial impact on confidentiality. There is no evidence of active exploitation, nor are there publicly available exploit modules or significant community discussion surrounding this decade-old vulnerability.