VULNERABILITY INTELLIGENCE

CVE-2007-3647

CVSS score10 HIGH
EPSS probability3.33%
CISA KEVNot currently listed
Published2007-07-10
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:C/I:C/A:C

Description

The isloggedin function in Php/login.inc.php in phpTrafficA 1.4.3 and earlier allows remote attackers to bypass authentication and obtain administrative access by setting the username cookie to "traffic." NOTE: some of these details are obtained from third party information.

Primary references