CVE-2008-4167

EPSS 2.6%

useradmin.php in Easy Photo Gallery (aka Ezphotogallery) 2.1 does not require administrative authentication, which allows remote attackers to (1) add or (2) remove an Administrator account.

Affected products

n/a · n/a

public PoCs found — 1

cve_referencewww.exploit-db.com/exploits/6437unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://secunia.com/advisories/31774 http://securityreason.com/securityalert/4282 https://exchange.xforce.ibmcloud.com/vulnerabilities/45119 https://www.exploit-db.com/exploits/6437 http://www.securityfocus.com/bid/31161