← Database

CVE-2006-4580

HIGH CVSS: 7.5 Published: 2006-12-31 Modified: 2026-06-16

Description

register.php in The Address Book 1.04e allows remote attackers to bypass the "Allow User Self-Registration" setting and create arbitrary users by setting the mode parameter to "confirm".

Affected Platforms

The Address Book The Address Book

Weakness Type

NVD-CWE-Other

References