high7.5Public exploit code
CVE-2008-0391
inc/elementz.php in aliTalk 1.9.1.1 does not properly verify authentication, which allows remote attackers to add an arbitrary user account via a modified lili…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- alitalk 1.9.1.1 - Multiple Vulnerabilities2008-01-16 · webapps · php · Verified
Impact
inc/elementz.php in aliTalk 1.9.1.1 does not properly verify authentication, which allows remote attackers to add an arbitrary user account via a modified lilil parameter, in conjunction with the ubild and pa parameters.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Alilg | Alitalk | Version 1.9.1.1 |