CVE-2012-6562

engine/lib/users.php in Elgg before 1.8.5 does not properly specify permissions for the useradd action, which allows remote attackers to create arbitrary accounts...

PT-2013-2016

Name of the Vulnerable Software and Affected Versions Elgg versions prior to 1.8.5 Description The issue is related to improper permission specification for the useradd action in the engine/lib/users.php file. This allows remote attackers to create arbitrary accounts. Recommendations For versions...

CVE-2012-6562: Undefined Security Weakness

engine/lib/users.php in Elgg before 1.8.5 does not properly specify permissions for the useradd action, which allows remote attackers to create arbitrary accounts...