Arbitrary Code Execution

ckan is vulnerable to arbitrary code execution. The vulnerability exists in usercreate function in create.py because the existing user id not properly validated which allows an attacker to take over an existing account and execute malicious code into the system...