TI-2008-06225 CVE-2008-6535 · GHSA-6wpf-856x-3cxcadmin/settings.php in PayPal eStores allows remote attackers to bypass intended access…Priority MEDIUM 42admin/settings.php in PayPal eStores allows remote attackers to bypass intended access restrictions and change the administrative password via a direct request with a modified NewAdmin parameter.CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.06331 · Published 2009-03-26 · No fix listed CWE-264