Bandwebsite (aka Bandsite portal system) 1.5 allows remote attackers to create administrative accounts via a direct request to admin.php with the Login parameter set to 1.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Bandwebsite | Jelle_de_vos | 1.5 (including) | 1.5 (including) |
References
- http://www.securityfocus.com/bid/21625
- http://www.securityfocus.com/data/vulnerabilities/exploits/21625.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/30921
- https://www.exploit-db.com/exploits/2938
- http://www.securityfocus.com/bid/21625
- http://www.securityfocus.com/data/vulnerabilities/exploits/21625.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/30921
- https://www.exploit-db.com/exploits/2938