NuytsTech Security

CVE-2006-6773

by ·

pages/register/register.php in Fishyshoop 0.930 beta allows remote attackers to create arbitrary administrative users by setting the is_admin HTTP POST parameter to 1.

Date published : 2006-12-27

http://www.securityfocus.com/bid/21731

http://www.securityfocus.com/archive/1/455260/100/0/threaded

Tags: