CVE-2010-2685: siteadmin/adduser.php in Customer Paradigm PageDirector CMS does not properly restrict access, which allows...

Security readout for executives and security teams

This CVE describes a PageDirector CMS access-control failure that could let a remote attacker create an administrative user by directly reaching an add-user page. If exploitable in an exposed deployment, the business impact is potential CMS takeover. The source bundle does not identify affected versions or a vendor fix. Exposure is likely limited to organizations still running Customer Paradigm PageDirector CMS with siteadmin/adduser.php reachable from untrusted networks. Version-specific exposure cannot be confirmed from the provided sources because affected versions are not listed. Prioritize investigation if PageDirector CMS is internet-facing or business-critical. The issue enables administrative account creation, but uncertainty around affected versions and fixes means teams should validate exposure before broad remediation work. Mitigation focus: Check Customer Paradigm or maintainer guidance for fixed versions or official remediation.; Restrict public access to the PageDirector siteadmin area immediately.; Review and remove unauthorized CMS administrator accounts..

Prepared

Jun 28, 2026, 02:01 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.