CVE-2011-4555 One Click Orgs before 1.2.3 does not require unique e-mail addresses for user accounts, which allows remote authenticated users to cause a denial of service (login disruption) or spoof votes or commen...
MediumCVSS 4.0
EPSS 0.88%
- Published
- Updated
- Exploit status
- No public exploit known
Description
One Click Orgs before 1.2.3 does not require unique e-mail addresses for user accounts, which allows remote authenticated users to cause a denial of service (login disruption) or spoof votes or comments by selecting a conflicting e-mail address.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| oneclickorgs one click orgs | <= 1.2.2 | No fix listed |
| oneclickorgs one click orgs | = 1.0.0 | No fix listed |
| oneclickorgs one click orgs | = 1.0.1 | No fix listed |
| oneclickorgs one click orgs | = 1.1.0 | No fix listed |
| oneclickorgs one click orgs | = 1.1.1 | No fix listed |
| oneclickorgs one click orgs | = 1.2.0 | No fix listed |
| oneclickorgs one click orgs | = 1.2.1 | No fix listed |