PT-2018-11554

Name of the Vulnerable Software and Affected Versions OpenSID version 18.06-pasca Description The issue allows an attacker to add an account at the admin level. This is achieved via the "index.php/man user/insert" API endpoint. Recommendations For OpenSID version 18.06-pasca, consider restricting...