CVE-2006-2737

The CVE-2006-2737 issue affects Nukedit 4.9.6 and earlier where utilities/register.asp allows remote creation of new users and assignment to arbitrary groups by tampering with the groupid parameter in the addDB action. This enables potential elevation to the administrative group. The vulnerabilit...