CVE-2006-2737

2006-06-01T10:02:00
ID CVE-2006-2737
Type cve
Reporter cve@mitre.org
Modified 2018-10-18T16:41:00

Description

utilities/register.asp in Nukedit 4.9.6 and earlier allows remote attackers to create new users as part of arbitrary groups, including the administrative group, via a modified groupid parameter when creating a user via the addDB action.