CVE-2007-5752

EPSS 2.8%

adduser.php in PHP-AGTC Membership (AGTC-Membership) System 1.1a does not require authentication, which allows remote attackers to create accounts via a modified form, as demonstrated by an account with admin (userlevel 4) privileges.

Affected products

n/a · n/a

public PoCs found — 2

exploitdbwww.exploit-db.com/exploits/5649unverified exploitdbwww.exploit-db.com/exploits/4589unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://secunia.com/advisories/27430 http://securityreason.com/securityalert/3326 https://exchange.xforce.ibmcloud.com/vulnerabilities/38173 http://www.securityfocus.com/archive/1/482919/100/0/threaded http://www.securityfocus.com/bid/26255