Bandwebsite (aka Bandsite portal system) 1.5 allows remote attackers to create administrative accounts via a direct request to admin.php with the Login parameter set to 1.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Bandwebsite | Jelle_de_vos | 1.5 (including) | 1.5 (including) |