CVE-2006-2527: Smartisoft Phpbazar

High severity, CVSS 7.5. EPSS: 3.3% chance of exploitation in the next 30 days.

Admin/admin.php in phpBazar 2.1.0 and earlier allows remote attackers to bypass the authentication process and gain unauthorized access to the administrative section by setting the action parameter to edit_member and the value parameter to 1.

Affected products

• Smartisoft Phpbazar: version 2.1.0 only

Published 2006-05-22. Last modified 2026-06-16.