CVE-2006-4427

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

2.98%

Published

Aug 29, 2006

Modified

Jun 16, 2026

Public PoC / Exploit (2)

All weaponized →

TrickestTrickest PoC index Exploit-DBeFiction < 2.0.7 - Remote Admin Authentication Bypass

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

index.php in eFiction before 2.0.7 allows remote attackers to bypass authentication and gain privileges by setting the (1) adminloggedin, (2) loggedin, and (3) level parameters to "1".

Affected Products (4)

efiction · efictionvulnerable

References (14)

http://efiction.org/forums/index.php?topic=3698

Patch

http://secunia.com/advisories/21625

PatchVendor Advisory

http://www.osvdb.org/28237

http://www.securityfocus.com/bid/19717

Patch

http://www.vupen.com/english/advisories/2006/3392

https://exchange.xforce.ibmcloud.com/vulnerabilities/28595

https://www.exploit-db.com/exploits/2255

http://efiction.org/forums/index.php?topic=3698

Patch

http://secunia.com/advisories/21625

PatchVendor Advisory

http://www.osvdb.org/28237

http://www.securityfocus.com/bid/19717

Patch

http://www.vupen.com/english/advisories/2006/3392

https://exchange.xforce.ibmcloud.com/vulnerabilities/28595

https://www.exploit-db.com/exploits/2255

KEV Catalog EPSS Scores Vendors All CVEs