Barry Shteiman

The issue allows remote attackers to create administrative accounts via the `customerid`, `htmldata[password]`, `htmldata[confirmpassword]`, and `htmldata[email]` parameters. This has been exploited in the wild.