What’s Vulnerable › Vulnerabilities

CVE-2017-12775

• Severity: high (CVSS 7.5 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2017-08-29 · updated 2026-06-17
• Weakness: CWE-20

Description

qa-include/qa-install.php in Question2Answer before 1.7.5 allows remote attackers to create multiple user accounts.

Affected products

• Question2Answer: through 1.7.4

References

• http://www.question2answer.org/versions.php
• https://github.com/q2a/question2answer/commit/6013ca1c83bf232008f7be815c0e4821fb6b120a
• http://www.question2answer.org/versions.php
• https://github.com/q2a/question2answer/commit/6013ca1c83bf232008f7be815c0e4821fb6b120a

Get alerted when CVE-2017-12775 or the next vulnerability affects your stack