CVE-2009-1771

CVE-2009-1771 affects Flyspeck CMS 6.8, where the updateExistingContent action does not require administrative authentication. This enables remote attackers to create or modify admin accounts by manipulating parameters: users[fullname], users[email], users[role_id], users[username], and users[pas...