KnowledgeQuest 2.5 and 2.6 does not require authentication for access to admincheck.php, which allows remote attackers to create arbitrary admin accounts.
References
Configurations
Configuration 1 (hide)
|
Information
Published : 2008-04-11 12:05
Updated : 2017-09-28 18:30
NVD link : CVE-2008-1727
Mitre link : CVE-2008-1727
JSON object : View
CWE
CWE-287
Improper Authentication
Products Affected
myknowledgequest
- knowledgequest