| Package | Affected versions | Patched versions |
|---|---|---|
| efiction | = 1.0= 1.1= 2.0= 2.0.6 |
index.php in eFiction before 2.0.7 allows remote attackers to bypass authentication and gain privileges by setting the (1) adminloggedin, (2) loggedin, and (3) level parameters to "1".
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free