Creative Guestbook 1.0 allows remote attackers to add an administrative account via a direct request to createadmin.php with Name, Email, and PASSWORD parameters set.
                
            References
                    Configurations
                    History
                    21 Nov 2024, 00:28
| Type | Values Removed | Values Added | 
|---|---|---|
| References | () http://osvdb.org/34234 - | |
| References | () http://secunia.com/advisories/24536 - Vendor Advisory | |
| References | () https://exchange.xforce.ibmcloud.com/vulnerabilities/33014 - | |
| References | () https://www.exploit-db.com/exploits/3489 - | 
Information
                Published : 2007-03-16 21:19
Updated : 2025-04-09 00:30
NVD link : CVE-2007-1480
Mitre link : CVE-2007-1480
CVE.ORG link : CVE-2007-1480
JSON object : View
Products Affected
                creative_guestbook
- creative_guestbook
 
CWE
                
                    
                        
                        CWE-287
                        
            Improper Authentication
