admin/ajoutaut.php in JBlog 1.0 does not require authentication, which allows remote attackers to create arbitrary accounts via modified mot and droit parameters.
References
Configurations
History
No history.
Information
Published : 2007-07-25 17:30
Updated : 2024-02-28 11:01
NVD link : CVE-2007-3974
Mitre link : CVE-2007-3974
CVE.ORG link : CVE-2007-3974
JSON object : View
Products Affected
jblog
- jblog
CWE