← Database

CVE-2006-4427

MEDIUM CVSS: 5.1 Published: 2006-08-29 Modified: 2026-06-16

Description

index.php in eFiction before 2.0.7 allows remote attackers to bypass authentication and gain privileges by setting the (1) adminloggedin, (2) loggedin, and (3) level parameters to "1".

Affected Platforms

Efiction Efiction

Weakness Type

NVD-CWE-Other

References