CVE-2008-6535

admin/settings.php in PayPal eStores allows remote attackers to bypass intended access restrictions and change the administrative password via a direct request with a modified NewAdmin parameter.

🔗 References (8)

• cve@mitrehttp://osvdb.org/50682
• cve@mitrehttp://secunia.com/advisories/33036
• cve@mitrehttps://exchange.xforce.ibmcloud.com/vulnerabilities/47203
• cve@mitrehttps://www.exploit-db.com/exploits/7367
• af854a3a-2127-422b-91ae-364da2661108http://osvdb.org/50682
• af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/33036
• af854a3a-2127-422b-91ae-364da2661108https://exchange.xforce.ibmcloud.com/vulnerabilities/47203
• af854a3a-2127-422b-91ae-364da2661108https://www.exploit-db.com/exploits/7367