← Database

CVE-2006-2527

HIGH CVSS: 7.5 Published: 2006-05-22 Modified: 2026-06-16

Description

Admin/admin.php in phpBazar 2.1.0 and earlier allows remote attackers to bypass the authentication process and gain unauthorized access to the administrative section by setting the action parameter to edit_member and the value parameter to 1.

Affected Platforms

Smartisoft Phpbazar

Weakness Type

NVD-CWE-Other

References