EUVD-2008-2343

Malware in sbrugna...

Authentication flaw

MyPicGallery 1.0 allows remote attackers to bypass application authentication and gain administrative access by setting the userID parameter to "admin" in a direct request to admin/addUser.php...

CVE-2008-2347

MyPicGallery 1.0 allows remote attackers to bypass application authentication and gain administrative access by setting the userID parameter to "admin" in a direct request to admin/addUser.php...

CVE-2008-2347

MyPicGallery 1.0 allows remote attackers to bypass application authentication and gain administrative access by setting the userID parameter to "admin" in a direct request to admin/addUser.php...

CVE-2008-2347

CVE-2008-2347 affects MyPicGallery 1.0. A flaw allows remote attackers to bypass authentication and gain administrative access by setting the userID parameter to "admin" in a direct request to admin/addUser.php, effectively enabling unauthorized admin creation. Root cause: insufficient authorizat...

CVE-2008-2347: Improper Authentication

MyPicGallery 1.0 allows remote attackers to bypass application authentication and gain administrative access by setting the userID parameter to "admin" in a direct request to admin/addUser.php...

MyPicGallery 1.0 Arbitrary Add-Admin Exploit

No description provided by source. !/usr/bin/perl use strict; use LWP::UserAgent; print "-+-- MyPicGallery 1.0 Arbitrary Add-Admin Exploit --+-\n"; print "-+-- Discovered && Coded By: t0pP8uZz --+-\n"; print "-+-- Discovered On: 16 MAY 2008 / h4ck-y0u, milw0rm --+-\n"; print "-+-- MyPicGallery 1....

MyPicGallery 1.0 Arbitrary Add-Admin Exploit

Exploit for unknown platform in category web applications ============================================ MyPicGallery 1.0 Arbitrary Add-Admin Exploit ============================================ !/usr/bin/perl use strict; use LWP::UserAgent; print "-+-- MyPicGallery 1.0 Arbitrary Add-Admin Exploit...

MyPicGallery 1.0 - Arbitrary Add Admin

!/usr/bin/perl use strict; use LWP::UserAgent; print "-+-- MyPicGallery 1.0 Arbitrary Add-Admin Exploit --+-\n"; print "-+-- Discovered && Coded By: t0pP8uZz --+-\n"; print "-+-- Discovered On: 16 MAY 2008 / h4ck-y0u, milw0rm --+-\n"; print "-+-- MyPicGallery 1.0 Arbitrary Add-Admin Exploit...