Description
board/admin/reguser.php in Chipmunk CMS 1.3 allows remote attackers to bypass authentication and gain administrator privileges via a direct request. NOTE: some of these details are obtained from third party information.
References
- chipmunkcms-reguser-security-bypass(46259) vdb-entry
- 4559 third-party-advisory
- 49494 vdb-entry
- 32476 third-party-advisory
- 6959 exploit