2008-05-28 15:00:00
mitre
PUBLISHED
admin/userform.php in RoomPHPlanning 1.5 does not require administrative credentials, which allows remote authenticated users to create new admin accounts.