Bandwebsite 1.5 - Unauthenticated Administrative Account Creation via Direct Request
Bandwebsite (aka Bandsite portal system) 1.5 allows remote attackers to create administrative accounts via a direct request to admin.php with the Login parameter set to 1.