Siteman contains a flaw that may allow a malicious user to gain access to unauthorized privileges. The issue is caused triggered when a malicious user submits a specially crafted form to users.php. This flaw will create an arbitrary admin account, which will lead to a loss of integrity.
Classification
Location:
Remote/Network Access Required
Attack Type:
Input Manipulation
Impact:
Loss of Integrity
Exploit:
Exploit Available
OSVDB:
Web Related
Solution
Currently, there are no known upgrades, patches, or workarounds available to correct this issue.