Vulnerability Details CVE-2008-6535
admin/settings.php in PayPal eStores allows remote attackers to bypass intended access restrictions and change the administrative password via a direct request with a modified NewAdmin parameter.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.014
EPSS Ranking 80.3%
CVSS Severity
CVSS v2 Score 7.5
References
- http://osvdb.org/50682
- http://secunia.com/advisories/33036
- https://exchange.xforce.ibmcloud.com/vulnerabilities/47203
- https://www.exploit-db.com/exploits/7367
- http://osvdb.org/50682
- http://secunia.com/advisories/33036
- https://exchange.xforce.ibmcloud.com/vulnerabilities/47203
- https://www.exploit-db.com/exploits/7367
Products affected by CVE-2008-6535
-
cpe:2.3:a:paypalestores:paypal_estores:-