CVE-2006-2527

CVE-2006-2527 describes an authentication bypass vulnerability in phpBazar 2.1.0 and earlier, allowing remote attackers to gain unauthorized administrative access. By manipulating the 'action' and 'value' parameters, an attacker can bypass the login process. This vulnerability has a CVSS score of 7.5, indicating high severity with network-based attacks, low complexity, and potential for partial compromise of confidentiality, integrity, and availability. While not listed in CISA's KEV catalog, public exploit code exists on ExploitDB, though there is no evidence of active exploitation or significant community discussion.