Cross site request forgery (csrf)

modules\users\admin\adduser.php in NukeViet 4.4 allows CSRF to add a user account via the admin/index.php?nv=users&op=useradd URI...

CVE-2020-13156: Cross-Site Request Forgery (CSRF)

modules\users\admin\adduser.php in NukeViet 4.4 allows CSRF to add a user account via the admin/index.php?nv=users&op=useradd URI...

Cross site request forgery (csrf)

adduser in AbiSoft Ticketly 1.0 allows remote attackers to create administrator accounts via an action/adduser.php POST request...

CVE-2018-18922: Direct Request

adduser in AbiSoft Ticketly 1.0 allows remote attackers to create administrator accounts via an action/adduser.php POST request...

eurosportscoreboard.com XSS vulnerability

Vulnerable URL: https://www.eurosportscoreboard.com/adduser.php Details: Description| Value ---|--- Patched:| Yes, at 22.11.2017 Latest check for patch:| 22.11.2017 09:14 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 467795 Google Pagerank| 4 VIP website...

wdlinux virtual host Management System File No Access authentication to establish a direct database user-vulnerability warning-the black bar safety net

Brief description: wdcpv2. 5. 1 0 file non-access authentication to establish a direct database account Detailed description: wdcpv2. 5. 1 0 file non-access authentication mysql/adduser. php to establish a direct account truncation of the modified data package to mount the default database to...

wdlinux虚拟主机管理系统文件无访问验证直接建立数据库用户

简要描述： wdcpv2.5.10 文件无访问验证直接建立数据库账户 详细说明： wdcpv2.5.10 文件无访问验证mysql/adduser.php直接建立账户 截断修改数据包 挂载默认数据库 获得后台账户密码 漏洞证明： http://www.pclow.com:8080/mysql/adduser.php...

W-Agora 4.0 - add_user.php bn_dir_default Parameter Remote File Inclusion

No description provided by source. source: http://www.securityfocus.com/bid/28366/info w-Agora is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the...

CVE-2010-5024: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in manage/adduser.php in CuteSITE CMS 1.2.3 and 1.5.0 allows remote authenticated users, with Read privileges, to execute arbitrary SQL commands via the userid parameter. NOTE: some of these details are obtained from third party information...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in adduser.php in Employee Timeclock Software 0.99 allows remote attackers to hijack the authentication of an administrator for requests that create new administrative users. NOTE: some of these details are obtained from third party information...

CVE-2010-0707

CVE-2010-0707: CSRF in Employee Timeclock Software 0.99 (add_user.php) allows remote attackers to hijack an administrator’s session and create new administrative users. Root cause is CSRF vulnerability on admin-account creation requests; impact is unauthorized admin account creation as described....

CVE-2010-0707: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in adduser.php in Employee Timeclock Software 0.99 allows remote attackers to hijack the authentication of an administrator for requests that create new administrative users. NOTE: some of these details are obtained from third party information...

CVE-2006-0686

adduser.php in Virtual Hosting Control System VHCS 2.4.7.1 and earlier does not check user privileges when adding a new administrative user, which allows remote attackers to gain unauthorized access...

CVE-2006-0686: Undefined Security Weakness

adduser.php in Virtual Hosting Control System VHCS 2.4.7.1 and earlier does not check user privileges when adding a new administrative user, which allows remote attackers to gain unauthorized access...

CVE-2006-0686

adduser.php in Virtual Hosting Control System VHCS 2.4.7.1 and earlier does not check user privileges when adding a new administrative user, which allows remote attackers to gain unauthorized access...

CVE-2006-0686

CVE-2006-0686 concerns VHCS (Virtual Hosting Control System) versions 2.4.7.1 and earlier. The vulnerability lies in add_user.php, which does not check privileges when creating a new administrative user, enabling a remote attacker to gain unauthorized access. Documents confirm the affected produc...

CVE-2002-0282: Undefined Security Weakness

DCP-Portal 3.7 through 4.5 allows remote attackers to obtain the physical path of the server via 1 a direct request to adduser.php, or via an invalid newlanguage parameter in 2 contents.php, 3 categories.php, or 4 files.php, which leaks the path in an error message...

CVE-2002-0286: Undefined Security Weakness

The GetPassword function in function.php of SiteNews 0.10 and 0.11 allows remote attackers to gain privileges and add users by providing a non-existent user name and the MD5 checksum for an empty password to adduser.php, which causes GetPassword to produce and compare a blank password for the...