6 matches found
CVE-2015-20117 RealtyScript 4.0.2 Cross-Site Request Forgery Unauthorized User Creation
Next Click Ventures RealtyScript 4.0.2 contains a cross-site request forgery vulnerability that allows unauthenticated attackers to create unauthorized user accounts and administrative users by crafting malicious forms. Attackers can submit hidden form data to /admin/addusers.php and...
6.9CVSS6AI score0.00203EPSS
SaveExploits1References3
CVE-2018-20851
Helpy before 2.2.0 allows agents to edit admins...
8.8CVSS8.7AI score0.01533EPSS
SaveExploits0References2
CVE-2018-20851
Helpy before 2.2.0 allows agents to edit admins...
8.8CVSS6.8AI score
SaveExploits0References2
UBUNTU-CVE-2016-8643
In Moodle 2.x and 3.x, non-admin site managers may accidentally edit admins via web services...
4.3CVSS5.7AI score0.00684EPSS
SaveExploits0References3
20