CVE-2006-2737

utilities/register.asp in Nukedit 4.9.6 and earlier allows remote attackers to create new users as part of arbitrary groups, including the administrative group, via a modified groupid parameter when creating a user via the addDB action.

Date published : 2006-06-01

http://www.securityfocus.com/bid/18157

http://www.securityfocus.com/archive/1/435311/100/0/threaded