CVE-2010-2685 siteadmin/adduser.php in Customer Paradigm PageDirector CMS does not properly restrict access, which allows remote attackers to bypass intended restrictions and add administrative users via a direct r...
HighCVSS 7.5
EPSS 2.4%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
siteadmin/adduser.php in Customer Paradigm PageDirector CMS does not properly restrict access, which allows remote attackers to bypass intended restrictions and add administrative users via a direct request.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| customerparadigm pagedirector cms | All versions | No fix listed |
References
- packetstormsecurity.org exploit
- 40367 third-party-advisory vendor-advisory
- 14089 exploit
- 65831 vdb-entry
- ADV-2010-1633 vdb-entry vendor-advisory