CVE-2008-3292

2008-07-2418:00:00

mitre

www.cve.org

AI Score

7.2

Confidence

Low

EPSS

0.009

Percentile

82.6%

JSON

constants.inc in EZWebAlbum 1.0 allows remote attackers to bypass authentication and gain administrator privileges by setting the photoalbumadmin cookie, as demonstrated via addpage.php.

References

securityreason.com/securityalert/4033

www.securityfocus.com/bid/30343

exchange.xforce.ibmcloud.com/vulnerabilities/43938

www.exploit-db.com/exploits/6115