CVE-2010-2685

EPSS 2.4%

siteadmin/adduser.php in Customer Paradigm PageDirector CMS does not properly restrict access, which allows remote attackers to bypass intended restrictions and add administrative users via a direct request.

Affected products

n/a · n/a

public PoCs found — 3

cve_referencepacketstormsecurity.org/1006-exploits/pagedirector-sqladdadmin.txtunverified cve_referencewww.exploit-db.com/exploits/14089unverified exploitdbwww.exploit-db.com/exploits/14089unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://packetstormsecurity.org/1006-exploits/pagedirector-sqladdadmin.txt http://secunia.com/advisories/40367 http://www.exploit-db.com/exploits/14089 http://www.osvdb.org/65831 http://www.vupen.com/english/advisories/2010/1633