PT-2026-7880

Wondershare MobileGo 8.5.0 contains an insecure file permissions vulnerability that allows local users to modify executable files in the application directory. Attackers can replace the original MobileGo.exe with a malicious executable to create a new user account and add it to the Administrators...

CVE-2020-37160 SprintWork 2.3.1 - Local Privilege Escalation

SprintWork 2.3.1 contains multiple local privilege escalation vulnerabilities through insecure file, service, and folder permissions on Windows systems. Local unprivileged users can exploit missing executable files and weak service configurations to create a new administrative user and gain...

CVE-2025-10352: Missing Authorization

Vulnerability in the melis-core module of Melis Technology's Melis Platform, which, if exploited, allows an unauthenticated attacker to create an administrator account via a request to '/melis/MelisCore/ToolUser/addNewUser'...

PT-2024-39120 · Learning Digital · Orca Hcm

Name of the Vulnerable Software and Affected Versions: Orca HCM from LEARNING DIGITAL affected versions not specified Description: The issue is related to a missing authentication vulnerability, allowing an unauthenticated remote attacker to exploit the functionality and create an account with...

CVE-2020-19964: Cross-Site Request Forgery (CSRF)

A Cross Site Request Forgery CSRF vulnerability was discovered in PHPMyWind 5.6 which allows attackers to create a new administrator account without authentication...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in ATutor 2.2 allow remote attackers to hijack the authentication of administrators for requests that 1 create an administrator account via a request to mods/core/users/admins/create.php or 2 create a user account via a request to...

CVE-2014-100025: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in index.php/userdata/insertuser in Savsoft Quiz allows remote attackers to hijack the authentication of administrators for requests that create an administrator account via a crafted request...

BPTutors Tutoring site script - [ CSRF ] Create Administrator Account

No description provided by source. Title: BPTutors Tutoring site script - CSRF Create Administrator Account Date: 26/3/2010 Author: bi0 Software: http://bpowerhouse.info/tutoring-site-script.htm Version: 1.0 Code : /\ == \ /\ \ /\ \ \ \ \ \ \ \ \ /\ \ \ \ \ \ \ \ // // // 01000010 01101001...

68kb 68KB Base 1.0.0rc3 - Cross-Site Request Forgery (Admin)

68kb 68KB Base 1.0.0rc3 - Cross-Site Request Forgery Admin Exploit Title: 68kb Knowledge Base v1.0.0rc3 create administrator account CSRF Date: 2010-04-02 Author: Jelmer de Hen Software Link: http://68kb.googlecode.com/files/68kb-v1.0.0rc3.zip Version: v1.0.0rc3 /index.php/admin/users/add" Exampl...

BPTutors Tutoring Site Script XSRF

Title: BPTutors Tutoring site script - CSRF Create Administrator Account Date: 26/3/2010 Author: bi0 Software: http://bpowerhouse.info/tutoring-site-script.htm Version: 1.0 Code : /\ == \ /\ \ /\ \ \ \ Admin 6+ Passwd 6+ Frist Name Last Name Email a class='classa'...

Easy Banner Pro Cross Site Request Forgery

/\ == \ /\ \ /\ \ \ \ inp...

AdManagerPro - Cross-Site Request Forgery (Add Admin)

AdManagerPro - Cross-Site Request Forgery Add Admin /\ == \ /\ \ /\ \ \ \ input type="...

Text Exchange Pro - Cross-Site Request Forgery (Add Admin)

Title: Text Exchange Pro - CSRF Create Administrator Account Date: 14/12/2009 Author: bi0 Software Link: http://scripts-gate.com/1/textexchangescript.html CVE : /\ == \ /\ \ /\ \ \ \ input t...

Easy Banner Pro - Cross-Site Request Forgery (Add Admin)

Title: Easy Banner Pro - CSRF Create Administrator Account Date: 14/12/2009 Author: bi0 Software Link: http://scripts-gate.com/4/easy-banner-pro-banner-exchange-script.html CVE : /\ == \ /\ \ /\ \ \ \ input type="hidden" name="rights" value="advertisers" CHE...

Link Up Gold - Cross-Site Request Forgery (Add Admin)

/\ == \ /\ \ /\ \ \ \ inp...

AdManagerPro CSRF Create Administrator Account

Exploit for unknown platform in category web applications ============================================== AdManagerPro CSRF Create Administrator Account ============================================== view source print? /\ == \ /\ \ /\ \ \ ...

Easy Banner Pro - Cross-Site Request Forgery (Add Admin)

Easy Banner Pro - Cross-Site Request Forgery Add Admin Title: Easy Banner Pro - CSRF Create Administrator Account Date: 14/12/2009 Author: bi0 Software Link: http://scripts-gate.com/4/easy-banner-pro-banner-exchange-script.html CVE : /\ == \ /\ \ /\ \ \ \ in...