add_user in AbiSoft Ticketly 1.0 allows remote malicious users to create administrator accounts via an action/add_user.php POST request.
abisoftgt ticketly 1.0