CVE-2007-4338: Haudenschilt Family Connections CMS

High severity, CVSS 10.0. EPSS: 8.9% chance of exploitation in the next 30 days.

index.php in Ryan Haudenschilt Family Connections (FCMS) before 0.9 allows remote attackers to access an arbitrary account by placing the account's name in the value of an fcms_login_id cookie. NOTE: this can be leveraged for code execution via a POST with PHP code in the content parameter.

Affected products

• Haudenschilt Family Connections CMS: up to and including 0.8; version 0.1.1 only; version 0.1.2 only; version 0.5 only; version 0.6 only

Published 2007-08-14. Last modified 2026-06-16.