Lucene search
HistoryMay 22, 2006 - 10:02 p.m.
CVE-2006-2527
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
7.2
Confidence
Low
EPSS
0.007
Percentile
80.5%
Admin/admin.php in phpBazar 2.1.0 and earlier allows remote attackers to bypass the authentication process and gain unauthorized access to the administrative section by setting the action parameter to edit_member and the value parameter to 1.
Affected configurations
Node
smartisoftphpbazarMatch2.1.0
| Vendor | Product | Version | CPE |
|---|---|---|---|
| smartisoft | phpbazar | 2.1.0 | cpe:2.3:a:smartisoft:phpbazar:2.1.0:*:*:*:*:*:*:* |
Related
prion
prion
Authentication flaw
2006-05-22 22:02:00
cve
cve
CVE-2006-2527
2006-05-22 22:02:00
cvelist
cvelist
CVE-2006-2527
2006-05-22 22:00:00
exploitdb
exploitdb
phpBazar 2.1.0 - Remote File Inclusion / Authentication Bypass
2006-05-19 00:00:00
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
7.2
Confidence
Low
EPSS
0.007
Percentile
80.5%
Related for NVD:CVE-2006-2527