SkaLinks 1.5 - 'register.php' Arbitrary Add Editor

|| || | || o,7 || . o7 || 4||| ow, : / / . SQL Injection Found by ::: mr.al7rbi Contact ::: n16 at live.com my Group ::: mr.al7rbi team Title: SkaLinks - Link Exchange Script d0rk: 2005. Powered by SkaLinks - Link Exchange Script DESCRIPTION: add admin EXPLOITS:...

CVE-2007-5917

CVE-2007-5917 is a CSRF vulnerability in Skalinks 1.5 and earlier, affecting admin/admin_account.php. The issue allows remote attackers to add arbitrary privileged administrator accounts via the admin_name, admin_password, admin_type, and Add_admin parameters. No remediation steps or patch versio...

CVE-2007-5917

Cross-site request forgery CSRF vulnerability in admin/adminaccount.php in Skalinks 1.5 and earlier allows remote attackers to add arbitrary privileged accounts as administrators via the adminname, adminpassword, admintype, and Addadmin parameters...