Authentication flaw

2008-04-1119:05:00

PRIOn knowledge base

www.prio-n.com

7.6 High

AI Score

Confidence

Low

0.022 Low

EPSS

Percentile

89.6%

JSON

KnowledgeQuest 2.5 and 2.6 does not require authentication for access to admincheck.php, which allows remote attackers to create arbitrary admin accounts.

CPENameOperatorVersion
knowledgequesteq2.5
knowledgequesteq2.6

CPE	Name	Operator	Version
	knowledgequest	eq	2.5
	knowledgequest	eq	2.6

References

secunia.com/advisories/29716

www.osvdb.org/44257

exchange.xforce.ibmcloud.com/vulnerabilities/41747

www.exploit-db.com/exploits/5418