add user project add user vulnerabilities and exploits

(subscribe to this query)

6.1

CVSSv3

The Custom Add User WordPress plugin up to and including 2.0.2 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin

Add User Project Add User

4.8

CVSSv3

Authenticated (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Nikhil Vaghela's Add User Role plugin <= 0.0.1 at WordPress.

Add User Role Project Add User Role

7.2

CVSSv3

Vulnerability in wordpress plugin add-edit-delete-listing-for-member-module v1.0, The plugin author does not sanitize user supplied input via $act before passing it into an SQL statement.

Add-edit-delete-listing-for-member-module Project Add-edit-delete-listing-for-member-module 1.0

8.8

CVSSv3

A Cross-Site Request Forgery (CSRF) vulnerability in the Multi User plugin 1.8.2 for GetSimple CMS allows remote malicious users to add admin (or other) users after an authenticated admin visits a third-party site or clicks on a URL.

Multi User Project Multi User 1.8.2

8.8

CVSSv3

An issue exists in /admin/?/user/add in Frog CMS 0.9.5. The application's add user functionality suffers from CSRF. A malicious user can craft an HTML page and use it to trick a victim into clicking on it; once executed, a malicious user will be created with admin privileges...

Frog Cms Project Frog Cms 0.9.5

1 EDB exploit

NA

Tiki CMS/Groupware (TikiWiki) 1.8.1 and previous versions allows remote malicious users to inject arbitrary code via the (1) Theme, (2) Country, (3) Real Name, or (4) Displayed time zone fields in a User Profile, or the (5) Name, (6) Description, (7) URL, or (8) Country fields in...

Tiki Tikiwiki Cms\\/groupware 1.6.1 Tiki Tikiwiki Cms\\/groupware

3 EDB exploits

6.5

CVSSv3

A cross-site request forgery (CSRF) in OPMS v1.3 and below allows malicious users to arbitrarily add a user account via /user/add.

Opms Project Opms 1.3

8.8

CVSSv3

An issue exists in SRCMS V2.3.1. There is a CSRF vulnerability that can add a user account via admin.php?m=Admin&c=member&a=add.

Srcms Project Srcms 2.3.1

8.8

CVSSv3

An issue exists in Flexo CMS v0.1.6. There is a CSRF vulnerability that can add an administrator via /admin/user/add.

Flexocms Project Flexo Cms 0.1.6

9.8

CVSSv3

Cobbler version up to 2.8.2 is vulnerable to a command injection vulnerability in the "add repo" component resulting in arbitrary code execution as root user.

Cobbler Project Cobbler

Get Started

1 2 3 4 5 6 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook