CVE-2012-4926

approve.php in Img Pals Photo Host 1.0 does not authenticate requests, which allows remote attackers to change the activation of administrators via the u parameter in an 1 app0 disable or 2 app1 enable action...

CVE-2012-4926

The CVE-2012-4926 issue affects Img Pals Photo Host 1.0, specifically the approve.php endpoint. The root cause is lack of authentication on requests, allowing remote attackers to change administrator activation via the u parameter in actions (app0 for disable, app1 for enable). The connected reco...