CVE-2006-4427

Published: Aug 29, 2006Modified: Apr 16, 2026

5.1

Vector

AV:N/AC:H/Au:N/C:P/I:P/A:P

Exploitability: 4.9 / Impact: 6.4

Source: NVD

Description

index.php in eFiction before 2.0.7 allows remote attackers to bypass authentication and gain privileges by setting the (1) adminloggedin, (2) loggedin, and (3) level parameters to "1".

Affected (4)

Products: Efiction: Efiction

Efiction

1 product

Efiction

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Efiction Efiction	Version 1.0
Efiction Efiction	Version 1.1
Efiction Efiction	Version 2.0.6
Efiction Efiction	Version 2.0

References (14)

http://efiction.org/forums/index.php?topic=3698

Source: cve@mitre.org

Patch

http://secunia.com/advisories/21625

Source: cve@mitre.org

PatchVendor Advisory

http://www.osvdb.org/28237

Source: cve@mitre.org

http://www.securityfocus.com/bid/19717

Source: cve@mitre.org

Patch

http://www.vupen.com/english/advisories/2006/3392

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/28595

Source: cve@mitre.org

https://www.exploit-db.com/exploits/2255

Source: cve@mitre.org

http://efiction.org/forums/index.php?topic=3698