CVE-2006-6773 pages/register/register.php in Fishyshoop 0.930 beta allows remote attackers to create arbitrary administrative users by setting the is_admin HTTP POST parameter to 1.
HighCVSS 7.5
EPSS 2.6%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
pages/register/register.php in Fishyshoop 0.930 beta allows remote attackers to create arbitrary administrative users by setting the is_admin HTTP POST parameter to 1.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| fishyshoop | = 0.930_beta | No fix listed |
References
- 23490 third-party-advisory vendor-advisory
- 2077 third-party-advisory
- 20061224 Fishyshoop Security Vulnerability mailing-list
- 21731 exploit vdb-entry
- ADV-2006-5182 vdb-entry