4 matches found
CVE-2015-20117 RealtyScript 4.0.2 Cross-Site Request Forgery Unauthorized User Creation
Next Click Ventures RealtyScript 4.0.2 contains a cross-site request forgery vulnerability that allows unauthenticated attackers to create unauthorized user accounts and administrative users by crafting malicious forms. Attackers can submit hidden form data to /admin/addusers.php and...
6.9CVSS5.8AI score0.00195EPSS
SaveExploits1References3
CVE-2018-20851
Helpy before 2.2.0 allows agents to edit admins...
8.8CVSS6.8AI score
SaveExploits0References2
20