CVE-2006-4427: Efiction

Medium severity, CVSS 5.1. EPSS: 3% chance of exploitation in the next 30 days.

index.php in eFiction before 2.0.7 allows remote attackers to bypass authentication and gain privileges by setting the (1) adminloggedin, (2) loggedin, and (3) level parameters to "1".

Affected products

• Efiction Efiction: version 1.0 only; version 1.1 only; version 2.0 only; version 2.0.6 only

Published 2006-08-29. Last modified 2026-06-16.