CVE-2018-18922

by Jeremyin Security Bulletinson Posted on

add_user in AbiSoft Ticketly 1.0 allows remote attackers to create administrator accounts via an action/add_user.php POST request.