engine/lib/users.php in Elgg before 1.8.5 does not properly specify permissions for the useradd action, which allows remote attackers to create arbitrary accounts...
6.8CVSS7.4AI score0.01338EPSS
SaveExploits0References5Affected Software1
Cvelist•added 2013/05/23 3:0 p.m.•26 views
CVE-2012-6562
engine/lib/users.php in Elgg before 1.8.5 does not properly specify permissions for the useradd action, which allows remote attackers to create arbitrary accounts...
