CVE-2011-4555

One Click Orgs before 1.2.3 does not require unique e-mail addresses for user accounts, which allows remote authenticated users to cause a denial of service (login disruption) or spoof votes or comments by selecting a conflicting e-mail address.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:oneclickorgs:one_click_orgs:*:*:*:*:*:*:*:*
cpe:2.3:a:oneclickorgs:one_click_orgs:1.0.0:*:*:*:*:*:*:*
cpe:2.3:a:oneclickorgs:one_click_orgs:1.0.1:*:*:*:*:*:*:*
cpe:2.3:a:oneclickorgs:one_click_orgs:1.1.0:*:*:*:*:*:*:*
cpe:2.3:a:oneclickorgs:one_click_orgs:1.1.1:*:*:*:*:*:*:*
cpe:2.3:a:oneclickorgs:one_click_orgs:1.2.0:*:*:*:*:*:*:*
cpe:2.3:a:oneclickorgs:one_click_orgs:1.2.1:*:*:*:*:*:*:*

History

21 Nov 2024, 01:32

Type Values Removed Values Added
References () http://dmcdonald.net/?page_id=43 - () http://dmcdonald.net/?page_id=43 -
References () https://groups.google.com/group/oneclickorgs-devspace/msg/26c40a4cc9e127d2?hl=en&dmode=source&output=gplain - () https://groups.google.com/group/oneclickorgs-devspace/msg/26c40a4cc9e127d2?hl=en&dmode=source&output=gplain -

Information

Published : 2011-12-06 11:55

Updated : 2024-11-21 01:32


NVD link : CVE-2011-4555

Mitre link : CVE-2011-4555

CVE.ORG link : CVE-2011-4555


JSON object : View

Products Affected

oneclickorgs

  • one_click_orgs
CWE
CWE-255

Credentials Management Errors