← Database

CVE-2008-6535

HIGH CVSS: 7.5 Published: 2009-03-26 Modified: 2026-06-16

Description

admin/settings.php in PayPal eStores allows remote attackers to bypass intended access restrictions and change the administrative password via a direct request with a modified NewAdmin parameter.

Affected Platforms

Paypalestores Paypal Estores

Weakness Type

CWE-264

References