CVE-2018-15888

CVE-2018-15888 affects ASPCMS 2.5.6. In /member/reg.asp, the addUser function allows registering ordinary users with the super administrator GroupID, enabling privilege elevation. The available connected sources confirm the vulnerability pattern but do not provide a concrete exploit, affected ver...