CVE-2019-14347

EPSS 9.3%

Internal/Views/addUsers.php in Schben Adive 2.0.7 allows remote unprivileged users (editor or developer) to create an administrator account via admin/user/add, as demonstrated by a Python PoC script.

Affected products

n/a · n/a

public PoCs found — 2

cve_referencepacketstormsecurity.com/files/155213/Adive-Framework-2.0.7-Privilege-Escalation.htmlunverified exploitdbwww.exploit-db.com/exploits/47600unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://packetstormsecurity.com/files/155213/Adive-Framework-2.0.7-Privilege-Escalation.html https://github.com/ferdinandmartin/adive-php https://hackpuntes.com/cve-2019-14347-escalacion-de-privilegios-en-adive/