index.php in BlogPHP 2.0 allows remote attackers to gain administrator privileges via a crafted email parameter in a register2 action.
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
Link | Tags |
---|---|
http://www.securityfocus.com/bid/29898 | vdb entry exploit |
https://www.exploit-db.com/exploits/5909 | exploit |
https://exchange.xforce.ibmcloud.com/vulnerabilities/43275 | vdb entry |