CVE-2007-5752: adduser.php in PHP-AGTC Membership (AGTC-Membership) System 1.1a does not require authentication, which all...

Security readout for executives and security teams

CVE-2007-5752 affects PHP-AGTC Membership System 1.1a. Its adduser.php page does not require authentication, allowing a remote user to create accounts, including administrator-level accounts. For any still-exposed deployment, this could let an outsider gain control of the membership system. Exposure is likely limited to legacy deployments of PHP-AGTC Membership System 1.1a reachable over the web. The provided CVE data lists affected vendor and product as n/a, so teams should validate by application name, files, and deployment history. Treat internet-facing instances as urgent because the flaw can create administrator accounts without login. Priority drops if the software is not present or is isolated. The main business task is confirming whether this very old membership system still exists anywhere. Mitigation focus: Inventory web apps for PHP-AGTC Membership System 1.1a.; Check vendor or project archives for a fixed release or workaround.; Restrict public access to the membership application until remediated..

Prepared

Jun 29, 2026, 01:47 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.