CVE-2002-1726

CVE-2002-1726 affects PhotoDB 1.4, specifically the secure_inc.php component. The vulnerability allows remote authentication bypass by constructing a URL with a large Time parameter, a non-empty rmtusername and rmtpassword, and an accesslevel lower than the requested page’s level. The CVSS-based ...

CVE-2002-1726

secureinc.php in PhotoDB 1.4 allows remote attackers to bypass authentication via a URL with a large Time parameter, non-empty rmtusername and rmtpassword parameter, and an accesslevel parameter that is lower than the access level of the requested page...