AUGUST 4, 2026
Live Feed
Return to register
Case File

CVE-2007-3647

HIGH · CVSS 10 EPSS 3.33%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2007-07-10 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE
CVE-2007-3647
Severity
HIGH
CVSS
10
EPSS
3.33%

Original Filing — NVD Description

The isloggedin function in Php/login.inc.php in phpTrafficA 1.4.3 and earlier allows remote attackers to bypass authentication and obtain administrative access by setting the username cookie to "traffic." NOTE: some of these details are obtained from third party information.