The addnew script in Argosoft Mail Server Pro 1.8.7.6 allows remote attackers to create arbitrary accounts, even if "Allow Creation of Accounts From the Web Interface" is disabled, via a direct HTTP POST request.
References
Configurations
Information
Published : 2005-05-01 21:00
Updated : 2017-07-10 18:32
NVD link : CVE-2005-1284
Mitre link : CVE-2005-1284
JSON object : View
CWE
Products Affected
argosoft
- argosoft_mail_server