Security Advisory

CVE-2021-44937

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2021-12-14 12:43:21
Last updated 2024-08-04 04:32:13
Assigner mitre
State PUBLISHED

Description

glFusion CMS v1.7.9 is affected by an arbitrary user registration vulnerability in /public_html/users.php. An attacker can register with the mailbox of any user. When users want to register, they will find that the mailbox has been occupied.