CVE-2006-0686

CVE-2006-0686 concerns VHCS (Virtual Hosting Control System) versions 2.4.7.1 and earlier. The vulnerability lies in add_user.php, which does not check privileges when creating a new administrative user, enabling a remote attacker to gain unauthorized access. Documents confirm the affected produc...

CVE-2002-0282: Undefined Security Weakness

DCP-Portal 3.7 through 4.5 allows remote attackers to obtain the physical path of the server via 1 a direct request to adduser.php, or via an invalid newlanguage parameter in 2 contents.php, 3 categories.php, or 4 files.php, which leaks the path in an error message...

CVE-2002-0286: Undefined Security Weakness

The GetPassword function in function.php of SiteNews 0.10 and 0.11 allows remote attackers to gain privileges and add users by providing a non-existent user name and the MD5 checksum for an empty password to adduser.php, which causes GetPassword to produce and compare a blank password for the...