CVE-2012-6562

CVE-2012-6562 affects Elgg prior to 1.8.5. The vulnerability stems from engine/lib/users.php not properly specifying permissions for the useradd action, allowing remote attackers to create arbitrary accounts. Impact is user creation without proper authorization. Root cause: insufficient permissio...