VULNERABILITY INTELLIGENCE

CVE-2006-0686

CVSS score10 HIGH
EPSS probability2.88%
CISA KEVNot currently listed
Published2006-02-15
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:C/I:C/A:C

Description

add_user.php in Virtual Hosting Control System (VHCS) 2.4.7.1 and earlier does not check user privileges when adding a new administrative user, which allows remote attackers to gain unauthorized access.

Primary references