Vulnerability in Pl-Php

CVE-2007-2007

admin.php in pL-PHP beta 0.9 allows remote attackers to bypass authentication by setting the is_admin parameter to 1.

EPSS: 0.027 (84.1th percentile) — read the EPSS interpretation.

Affected products

  • Pl-php — versions 0.9_beta
  • N/a — versions n/a

References