VULNERABILITY INTELLIGENCE

CVE-2007-2822

CVSS score9.3 HIGH
EPSS probability4.42%
CISA KEVNot currently listed
Published2007-05-22
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:C/I:C/A:C

Description

TutorialCMS 1.01 and earlier, when register_globals is enabled, allows remote attackers to bypass authentication via the (1) loggedIn and (2) activated parameters to (a) login.php, (b) headerLinks.php, (c) submit1.php, (d) myFav.php, and (e) userCP.php.

Primary references