CVE-2006-4427

Summary

index.php in eFiction before 2.0.7 allows remote attackers to bypass authentication and gain privileges by setting the (1) adminloggedin, (2) loggedin, and (3) level parameters to "1".

Affected Software

Weaknesses

• n/a

ADP Enrichment

CVE Program Container

Additional References

• https://exchange.xforce.ibmcloud.com/vulnerabilities/28595
• http://www.securityfocus.com/bid/19717
• https://www.exploit-db.com/exploits/2255
• http://www.osvdb.org/28237
• http://efiction.org/forums/index.php?topic=3698
• http://www.vupen.com/english/advisories/2006/3392
• http://secunia.com/advisories/21625

References

• https://exchange.xforce.ibmcloud.com/vulnerabilities/28595
• http://www.securityfocus.com/bid/19717
• https://www.exploit-db.com/exploits/2255
• http://www.osvdb.org/28237
• http://efiction.org/forums/index.php?topic=3698
• http://www.vupen.com/english/advisories/2006/3392
• http://secunia.com/advisories/21625

• ←Previous
• Next→