← Database

CVE-2007-2822

CRITICAL CVSS: 9.3 Published: 2007-05-22 Modified: 2026-06-16

Description

TutorialCMS 1.01 and earlier, when register_globals is enabled, allows remote attackers to bypass authentication via the (1) loggedIn and (2) activated parameters to (a) login.php, (b) headerLinks.php, (c) submit1.php, (d) myFav.php, and (e) userCP.php.

Affected Platforms

Wavelink Media Tutorialcms

Weakness Type

NVD-CWE-Other

References