secure.php in PY-Membres 4.2 and earlier allows remote attackers to bypass authentication by setting the adminpy parameter.
Threat-Mapped Scoring
Score: 0.0
Priority: Unclassified
EPSS
Score: 0.00335
Percentile:
0.55718
CVSS Scoring
CVSS v2 Score: 7.5
Severity:
Affected Products
- cpe:2.3:a:py-membres:py-membres:4.0:*:*:*:*:*:*:*
- cpe:2.3:a:py-membres:py-membres:4.1:*:*:*:*:*:*:*
- cpe:2.3:a:py-membres:py-membres:4.2:*:*:*:*:*:*:*
← Back to Home