Security Vulnerability found in Installer

Status: Pre-Alpha

Brought to you by: crossrocks, dirtydevil76, pluggedout, racooper

#1 Security Vulnerability found in Installer

Status: open

Owner: nobody

Labels: None

Priority: 9

Updated: 2006-08-09

Created: 2006-08-09

Private: No

When you first install the PluggedOut CMS script, it
asks for an admin password the first time you visit the
admin interface.

The same URL used to do that can also be used to reset
the admin password (the form doesn't check that the
password already exists).