Description (CNA)
index.php in eFiction before 2.0.7 allows remote attackers to bypass authentication and gain privileges by setting the (1) adminloggedin, (2) loggedin, and (3) level parameters to "1".
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- https://exchange.xforce.ibmcloud.com/vulnerabilities/28595
- http://www.securityfocus.com/bid/19717
- https://www.exploit-db.com/exploits/2255
- http://www.osvdb.org/28237
- http://efiction.org/forums/index.php?topic=3698
- http://www.vupen.com/english/advisories/2006/3392
- http://secunia.com/advisories/21625
ADP enrichment
No English description supplied.