Unscored severity · published Apr 11, 2008
CVE-2008-1727
KnowledgeQuest 2.5 and 2.6 does not require authentication for access to admincheck.php, which allows remote attackers to create arbitrary admin accounts
–
CVSS
6.8%
EPSS
No
On KEV
Description
KnowledgeQuest 2.5 and 2.6 does not require authentication for access to admincheck.php, which allows remote attackers to create arbitrary admin accounts.
Exploitation
Is it being used?
Exploit prediction (EPSS)6.8% · higher than 94% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
KN
Knowledgequest · Myknowledgequest
2.5; 2.6 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-1727
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-1727
Vendor Advisory
http://secunia.com/advisories/29716
www.osvdb.org
http://www.osvdb.org/44257
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/41747
www.exploit-db.com
https://www.exploit-db.com/exploits/5418
More from Knowledgequest
–
CVE-2008-1726
Multiple SQL injection vulnerabilities in KnowledgeQuest 2.6, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) kqid…