CVE-2024-6425

Incorrect Provision of Specified Functionality vulnerability in MESbook 20221021.03 version. An unauthenticated remote attacker can register user accounts without being authenticated from the route "/account/Register/" and in the parameters "UserName=&Password=&ConfirmPassword="...

PT-2014-4596

Name of the Vulnerable Software and Affected Versions vTiger version 6.0 before Security Patch 2 Description The issue allows remote attackers to reset the password for arbitrary users. This is achieved via a request containing the username, password, and confirmPassword parameters. Recommendatio...

Design/Logic Flaw

The install/upgrade.php scripts in vBulletin 4.1 and 5 allow remote attackers to create administrative accounts via the customerid, htmldatapassword, htmldataconfirmpassword, and htmldataemail parameters, as exploited in the wild in October 2013...

PT-2013-5950

Name of the Vulnerable Software and Affected Versions vBulletin versions 4.1 and 5 Description The issue allows remote attackers to create administrative accounts via the customerid, htmldatapassword, htmldataconfirmpassword, and htmldataemail parameters. This has been exploited in the wild...