2008-04-11 19:00:00
mitre
PUBLISHED
KnowledgeQuest 2.5 and 2.6 does not require authentication for access to admincheck.php, which allows remote attackers to create arbitrary admin accounts.