4 matches found
CVE-2015-20117 RealtyScript 4.0.2 Cross-Site Request Forgery Unauthorized User Creation
Next Click Ventures RealtyScript 4.0.2 contains a cross-site request forgery vulnerability that allows unauthenticated attackers to create unauthorized user accounts and administrative users by crafting malicious forms. Attackers can submit hidden form data to /admin/addusers.php and...
CVE-2018-20851
Helpy before 2.2.0 allows agents to edit admins...
CVE-2018-20851
Helpy before 2.2.0 allows agents to edit admins...
UBUNTU-CVE-2016-8643
In Moodle 2.x and 3.x, non-admin site managers may accidentally edit admins via web services...