CVE-2009-1771

CVE-2009-1771 affects Flyspeck CMS 6.8, where the updateExistingContent action does not require administrative authentication. This enables remote attackers to create or modify admin accounts by manipulating parameters: users[fullname], users[email], users[role_id], users[username], and users[pas...

CVE-2009-1771: Undefined Security Weakness

index.php in Flyspeck CMS 6.8 does not require administrative authentication for the updateExistingContent action, which allows remote attackers to create or modify admin accounts via the 1 usersfullname, 2 usersemail, 3 usersroleid, 4 usersusername, and 5 userspassword parameters...