CVE-2018-18922

add_user in AbiSoft Ticketly 1.0 allows remote attackers to create administrator accounts via an action/add_user.php POST request.

mitre·CWE-425·Published 2018-12-13

CVSS

—

EPSS

0.02

KEV

Exploits

cve.orgen

130 chars

add_user in AbiSoft Ticketly 1.0 allows remote attackers to create administrator accounts via an action/add_user.php POST request.

NVDen

130 chars

add_user in AbiSoft Ticketly 1.0 allows remote attackers to create administrator accounts via an action/add_user.php POST request.

NVDes

144 chars

add_user en AbiSoft Ticketly 1.0 permite que atacantes remotos creen cuentas de administrador mediante una petición POST en action/add_user.php.

Version	Type	Source	Base	Exp	Impact	Vector
2.0	Primary	NVD	5.0	10.0	2.9	AV:N/AC:L/Au:N/C:N/I:P/A:N
3.0	Primary	NVD	9.8	3.9	5.9	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H