CVE-2005-2489

The CVE concerns Web Content Management News System. The vulnerability originates from a direct request to Admin/Users/AddModifyInput.php that lets remote attackers create arbitrary user accounts and gain privileges. This implies a bypass of normal authorization checks and potential privilege esc...

CVE-2005-2489

Web Content Management News System allows remote attackers to create arbitrary accounts and gain privileges via a direct request to Admin/Users/AddModifyInput.php...