CVE-2015-20117 | BDVDB-2026-320569 Detail

Description#

Next Click Ventures RealtyScript 4.0.2 contains a cross-site request forgery vulnerability that allows unauthenticated attackers to create unauthorized user accounts and administrative users by crafting malicious forms. Attackers can submit hidden form data to /admin/addusers.php and /admin/editadmins.php endpoints to register new users with arbitrary credentials and escalate privileges to SUPERUSER level.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12026-03-15Record published in the CVE List.
2. Version 22026-10-27Most recent update recorded in the CVE List.