CVE-2019-14347

High

Internal/Views/addUsers.php in Schben Adive 2.0.7 allows remote unprivileged users (editor or developer) to create an administrator account…

mitre·CWE-425·Published 2019-08-06

CVSS

8.8

EPSS

0.09

KEV

Exploits

cve.orgen

199 chars

Internal/Views/addUsers.php in Schben Adive 2.0.7 allows remote unprivileged users (editor or developer) to create an administrator account via admin/user/add, as demonstrated by a Python PoC script.

NVDen

199 chars

Internal/Views/addUsers.php in Schben Adive 2.0.7 allows remote unprivileged users (editor or developer) to create an administrator account via admin/user/add, as demonstrated by a Python PoC script.

El archivo Internal/Views/addUsers.php en Adive de Schben versión 2.0.7, permite a los usuarios remotos no privilegiados (editor o desarrollador) crear una cuenta de administrador por medio de admin/user/add, como es demostrado mediante un script PoC de Python.

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
2.0	Primary	NVD	6.5	8.0	6.4	AV:N/AC:L/Au:S/C:P/I:P/A:P
3.1	Primary	NVD	8.8	2.8	5.9	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H