CVE-2012-6562

Published: May 23, 2013Modified: Apr 29, 2026

6.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 8.6 / Impact: 6.4

Source: NVD

Description

engine/lib/users.php in Elgg before 1.8.5 does not properly specify permissions for the useradd action, which allows remote attackers to create arbitrary accounts.

Affected (23)

Products: Elgg: Elgg

Elgg

1 product

Elgg

Configuration A

23 vulnerable

Vulnerable Software	Affected Versions
Elgg Elgg	Up to 1.8.4
Elgg Elgg	Version 1.7.0
Elgg Elgg	Version 1.7.10
Elgg Elgg	Version 1.7.11
Elgg Elgg	Version 1.7.12
Elgg Elgg	Version 1.7.13
Elgg Elgg	Version 1.7.14
Elgg Elgg	Version 1.7.15
Elgg Elgg	Version 1.7.16
Elgg Elgg	Version 1.7.17
Elgg Elgg	Version 1.7.18
Elgg Elgg	Version 1.7.1
Elgg Elgg	Version 1.7.2
Elgg Elgg	Version 1.7.3
Elgg Elgg	Version 1.7.4
Elgg Elgg	Version 1.7.5
Elgg Elgg	Version 1.7.6
Elgg Elgg	Version 1.7.7
Elgg Elgg	Version 1.7.8
Elgg Elgg	Version 1.7.9
Elgg Elgg	Version 1.8.0.1
Elgg Elgg	Version 1.8.1
Elgg Elgg	Version 1.8.3