CVE-2008-1727

KnowledgeQuest 2.5 and 2.6 does not require authentication for access to admincheck.php, which allows remote attackers to create arbitrary admin accounts.

Score

CVSS 2.0 7.5 High

Status

Modified - cve@mitre.org

Published

2008-04-11

Last modified

2024-08-07

Weaknesses

CWE-287

Affected products

• Knowledgequest (Myknowledgequest)

References

• http://secunia.com/advisories/29716
• http://www.osvdb.org/44257
• https://exchange.xforce.ibmcloud.com/vulnerabilities/41747
• https://www.exploit-db.com/exploits/5418