Phpaddedit: >> Phpaddedit Security Vulnerabilities
login.php in PhpAddEdit 1.3 allows remote attackers to bypass authentication and gain administrative access by setting the addedit cookie parameter.
CVSS Score
7.5
EPSS Score
0.048
Published
2009-04-02
Directory traversal vulnerability in addedit-render.php in phpAddEdit 1.3, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via a URL in the editform parameter. NOTE: PHP remote file inclusion attacks are also likely.
CVSS Score
6.8
EPSS Score
0.016
Published
2009-02-27