Movie Rating System version 1.0 suffers from a broken access control that allows for administrative account creation.