User Registration Vulnerability in ASPCMS 2.5.6

CVE-2018-15888 · HIGH Severity

AV:N/AC:L/AU:N/C:P/I:P/A:P

An issue was discovered in ASPCMS 2.5.6. When registering ordinary users in the addUser function of the /member/reg.asp page, they can be registered with the super administrators GroupID directly.

Learn more about our Cms Pen Testing.