CVE-2008-6535

admin/settings.php in PayPal eStores allows remote attackers to bypass intended access restrictions and change the administrative password via a direct request with a modified NewAdmin parameter.

Date published : 2009-03-26

https://www.exploit-db.com/exploits/7367

http://osvdb.org/50682