An issue exists in ASPCMS 2.5.6. When registering ordinary users in the addUser function of the /member/reg.asp page, they can be registered with the super administrators GroupID directly.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
aspcms aspcms 2.5.6 |