critical9.8Public exploit code
CVE-2023-37759
Incorrect access control in the User Registration page of Crypto Currency Tracker (CCT) before v9.5 allows unauthenticated attackers to register as an Admin ac…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Crypto Currency Tracker (CCT) 9.5 - Admin Account Creation (Unauthenticated)2023-08-21 · webapps · php
Impact
Incorrect access control in the User Registration page of Crypto Currency Tracker (CCT) before v9.5 allows unauthenticated attackers to register as an Admin account via a crafted POST request.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Trendylogics | Crypto Currency Tracker | through 9.5 |
Weakness classification
References
- NVD record
- CVE.org record
- https://codecanyon.net/item/crypto-currency-tracker-prices-charts-news-icos-info-and-more/21588008
- https://packetstormsecurity.com/files/174240/Crypto-Currency-Tracker-CCT-9.5-Add-Administrator.html
- https://tregix.com/
- https://codecanyon.net/item/crypto-currency-tracker-prices-charts-news-icos-info-and-more/21588008
- https://packetstormsecurity.com/files/174240/Crypto-Currency-Tracker-CCT-9.5-Add-Administrator.html
- https://tregix.com/