← back
CVE-2023-37759

CVE-2023-37759

EPSS 3.6%CWE-284
Vexday Risk Score
23Low
SSVC decision (CISA)
Attend
PoC available → attend closely
CVSS —EPSS 3.6%KEV nãoPoC públicaNuclei —Metasploit —Patch —
Lifecycle
21 Aug 2023Public PoC
08 Sep 2023Published on NVD
Recommendation: Plan a near-term fix — a public PoC already exists.
Incorrect access control in the User Registration page of Crypto Currency Tracker (CCT) before v9.5 allows unauthenticated attackers to register as an Admin account via a crafted POST request.
Affected products
n/a · n/a
public PoCs found — 2
cve_referencepacketstormsecurity.com/files/174240/Crypto-Currency-Tracker-CCT-9.5-Add-Administrator.htmlunverifiedexploitdbwww.exploit-db.com/exploits/51688unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://codecanyon.net/item/crypto-currency-tracker-prices-charts-news-icos-info-and-more/21588008https://packetstormsecurity.com/files/174240/Crypto-Currency-Tracker-CCT-9.5-Add-Administrator.htmlhttps://tregix.com/