PT-2007-6728 · Agtc · Agtc-Membership System

Published 2007-10-31 · Updated 2018-10-15 · CVE-2007-5752

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions AGTC-Membership System version 1.1a

Description The issue concerns the adduser.php file, which does not require authentication. This allows remote attackers to create accounts by modifying the form. For example, an attacker can create an account with admin privileges, specifically userlevel 4.

Recommendations For AGTC-Membership System version 1.1a, consider implementing authentication requirements for the adduser.php file to prevent unauthorized account creation. As a temporary workaround, restrict access to the adduser.php file until a proper authentication mechanism is in place.

Exploit

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2007-5752

Affected Products

Agtc-Membership System

References · 8

• 🔥 https://exploit-db.com/exploits/5649 · Exploit
• 🔥 https://exploit-db.com/exploits/4589 · Exploit
• http://secunia.com/advisories/27430 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2007-5752 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/38173 · Note
• http://securityreason.com/securityalert/3326 · Note
• http://securityfocus.com/bid/26255 · Note
• http://securityfocus.com/archive/1/482919/100/0/threaded · Note