CVE-2019-14347 - Internal/Views/addUsers.php in Schben Adive 2.0.7 allows remote unprivileged users (editor or developer) to create an administrator account via admin/user/add, as demonstrated by a Python PoC script

Back Back to CVE browser

HIGH

Internal/Views/addUsers.php in Schben Adive 2.0.7 allows remote unprivileged users (editor or developer) to create an administrator account via admin/user/add, as demonstrated by a Python PoC script

Published Aug 6, 2019

8.8

HIGH

CVSS 3.1

EPSS 9.31%

Description

Internal/Views/addUsers.php in Schben Adive 2.0.7 allows remote unprivileged users (editor or developer) to create an administrator account via admin/user/add, as demonstrated by a Python PoC script.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-425

References (3)

http://packetstormsecurity.com/files/155213/Adive-Framework-2.0.7-Privilege-Escalation.html
x_refsource_MISCExploitThird Party AdvisoryVDB Entry
https://github.com/ferdinandmartin/adive-php
x_refsource_MISCBroken Link
https://hackpuntes.com/cve-2019-14347-escalacion-de-privilegios-en-adive/
x_refsource_MISCExploitThird Party Advisory

Link	Providers	Tags
http://packetstormsecurity.com/files/155213/Adive-Framework-2.0.7-Privilege-Escalation.html		x_refsource_MISCExploitThird Party AdvisoryVDB Entry
https://github.com/ferdinandmartin/adive-php		x_refsource_MISCBroken Link
https://hackpuntes.com/cve-2019-14347-escalacion-de-privilegios-en-adive/		x_refsource_MISCExploitThird Party Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Aug 6, 2019

Updated Aug 5, 2024

Reserved Jul 28, 2019

Link CVE-2019-14347

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2019-14347

Red Hat

Severity n/a

Public date n/a

Links CVE-2019-14347