CVEs-PoC/2006/CVE-2006-0686.md

CVE-2006-0686

Description

add_user.php in Virtual Hosting Control System (VHCS) 2.4.7.1 and earlier does not check user privileges when adding a new administrative user, which allows remote attackers to gain unauthorized access.

POC

Reference

• http://securityreason.com/securityalert/430
• http://securityreason.com/securityalert/430
• http://www.rs-labs.com/adv/RS-Labs-Advisory-2006-1.txt
• http://www.rs-labs.com/adv/RS-Labs-Advisory-2006-1.txt

Github

No PoCs found on GitHub currently.