Unrated severityNVD Advisory· Published May 23, 2013· Updated Apr 29, 2026
CVE-2012-6562
CVE-2012-6562
Description
engine/lib/users.php in Elgg before 1.8.5 does not properly specify permissions for the useradd action, which allows remote attackers to create arbitrary accounts.
Affected products
23cpe:2.3:a:elgg:elgg:*:*:*:*:*:*:*:*+ 22 more
- cpe:2.3:a:elgg:elgg:*:*:*:*:*:*:*:*range: <=1.8.4
- cpe:2.3:a:elgg:elgg:1.7.0:*:*:*:*:*:*:*
- cpe:2.3:a:elgg:elgg:1.7.1:*:*:*:*:*:*:*
- cpe:2.3:a:elgg:elgg:1.7.10:*:*:*:*:*:*:*
- cpe:2.3:a:elgg:elgg:1.7.11:*:*:*:*:*:*:*
- cpe:2.3:a:elgg:elgg:1.7.12:*:*:*:*:*:*:*
- cpe:2.3:a:elgg:elgg:1.7.13:*:*:*:*:*:*:*
- cpe:2.3:a:elgg:elgg:1.7.14:*:*:*:*:*:*:*
- cpe:2.3:a:elgg:elgg:1.7.15:*:*:*:*:*:*:*
- cpe:2.3:a:elgg:elgg:1.7.16:*:*:*:*:*:*:*
- cpe:2.3:a:elgg:elgg:1.7.17:*:*:*:*:*:*:*
- cpe:2.3:a:elgg:elgg:1.7.18:*:*:*:*:*:*:*
- cpe:2.3:a:elgg:elgg:1.7.2:*:*:*:*:*:*:*
- cpe:2.3:a:elgg:elgg:1.7.3:*:*:*:*:*:*:*
- cpe:2.3:a:elgg:elgg:1.7.4:*:*:*:*:*:*:*
- cpe:2.3:a:elgg:elgg:1.7.5:*:*:*:*:*:*:*
- cpe:2.3:a:elgg:elgg:1.7.6:*:*:*:*:*:*:*
- cpe:2.3:a:elgg:elgg:1.7.7:*:*:*:*:*:*:*
- cpe:2.3:a:elgg:elgg:1.7.8:*:*:*:*:*:*:*
- cpe:2.3:a:elgg:elgg:1.7.9:*:*:*:*:*:*:*
- cpe:2.3:a:elgg:elgg:1.8.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:elgg:elgg:1.8.1:*:*:*:*:*:*:*
- cpe:2.3:a:elgg:elgg:1.8.3:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
5- elgg.org/getelgg.phpnvdPatchVendor Advisory
- blog.elgg.org/pg/blog/evan/read/209/elgg-185-releasednvdVendor Advisory
- secunia.com/advisories/49129nvdVendor Advisory
- www.securityfocus.com/bid/53623nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/75757nvd
News mentions
0No linked articles in our index yet.