CVE-2006-4427
MEDIUM 5.1EPSS 3.0%
index.php in eFiction before 2.0.7 allows remote attackers to bypass authentication and gain privileges by setting the (1) adminloggedin, (2) loggedin, and (3) level parameters to "1".
- CVSS v2.0 NVD
- 5.1 MEDIUM
AV:N/AC:H/Au:N/C:P/I:P/A:P - EPSS
- 3.04% chance of exploitation in the next 30 days, 87th percentile
- Published
- 2006-08-29
- Updated
- 2024-08-07
ExploitDB entries (1)
Security advisories
- http://secunia.com/advisories/21625
- http://efiction.org/forums/index.php?topic=3698
- http://www.securityfocus.com/bid/19717