Security Advisory
CVE-2008-6535
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
admin/settings.php in PayPal eStores allows remote attackers to bypass intended access restrictions and change the administrative password via a direct request with a modified NewAdmin parameter.