Description
The addnew script in Argosoft Mail Server Pro 1.8.7.6 allows remote attackers to create arbitrary accounts, even if "Allow Creation of Accounts From the Web Interface" is disabled, via a direct HTTP POST request.
References
- 13323 vdb-entry
- 20050422 Multiple vulnerabilities in Argosoft Mail Server 1.8.7.6 mailing-list
- argosoft-mail-server-add-new-mail-account(20228) vdb-entry
- 15822 vdb-entry