Security Advisory
CVE-2008-2488
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
admin/userform.php in RoomPHPlanning 1.5 does not require administrative credentials, which allows remote authenticated users to create new admin accounts.