Invision Power Board (IPB) 1.0 through 2.0.4 allows non-root admins to add themselves or other users to the root admin group via the "Move users in this group to" screen.
References
Configurations
Configuration 1 (hide)
|
Information
Published : 2005-05-31 21:00
Updated : 2008-09-05 13:50
NVD link : CVE-2005-1816
Mitre link : CVE-2005-1816
JSON object : View
CWE
Products Affected
invision_power_services
- invision_board