Description
Baal Smart Forms before 3.2 allows remote attackers to bypass authentication and obtain system access via a direct request to regadmin.php.
References
- baal-admin-password-modify(17499) vdb-entry
- 12649 third-party-advisory
- 1011416 vdb-entry