Vulnerability in Pixelpost

CVE-2006-2890

Pixelpost 1-5rc1-2 and earlier, when register_globals is enabled, allows remote attackers to gain administrator privileges and conduct other attacks by setting the _SESSION["pixelpost_admin"] parameter to 1 in calls to admin scripts such as admin/view_info.php.

EPSS: 0.015 (70.8th percentile) — read the EPSS interpretation.

Affected products

Pixelpost — versions 1.5_rc1
N/a — versions n/a

References

cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
cve@mitre.org (Exploit, x_refsource_MISC)
cve@mitre.org (x_refsource_SREASON, third-party-advisory)
cve@mitre.org (Exploit, vdb-entry, x_refsource_BID)
cve@mitre.org (Exploit, vdb-entry, x_refsource_SECTRACK)