Code injection

2008-05-2815:32:00

PRIOn knowledge base

www.prio-n.com

6.8 Medium

AI Score

Confidence

Low

0.011 Low

EPSS

Percentile

84.7%

JSON

admin/userform.php in RoomPHPlanning 1.5 does not require administrative credentials, which allows remote authenticated users to create new admin accounts.

CPENameOperatorVersion
roomphplanningeq1.5

CPE	Name	Operator	Version
	roomphplanning	eq	1.5

References

secunia.com/advisories/30376

www.securityfocus.com/bid/29377

exchange.xforce.ibmcloud.com/vulnerabilities/42629

www.exploit-db.com/exploits/5674