CVE-2021-44937

MEDIUM

glFusion CMS 1.7.9 - Arbitrary User Registration via users.php

Title source: llm

Description

glFusion CMS v1.7.9 is affected by an arbitrary user registration vulnerability in /public_html/users.php. An attacker can register with the mailbox of any user. When users want to register, they will find that the mailbox has been occupied.

References (1)

Core 1

Core References

Exploit, Issue Tracking, Third Party Advisory x_refsource_misc

https://github.com/glFusion/glfusion/issues/485

Scores

CVSS v3 5.3

EPSS 0.0071

EPSS Percentile 48.8%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Details

CWE

CWE-287

Status published

Products (1)

glfusion/glfusion 1.7.9

Published Dec 14, 2021

Tracked Since Feb 18, 2026