CVE-2008-0246

The CVE-2008-0246 entry describes a vulnerability in admin.php of UploadScript 1.0 where the original password is not validated before changing to a new one. This allows remote attackers to gain administrator privileges by supplying the new password via the pass parameter in a nopass (Set Passwor...

CVE-2008-0245

CVE-2008-0245 affects admin.php in UploadImage 1.0, where the original password is not validated before updating to a new password. This allows remote attackers to gain administrator privileges by supplying a pass parameter in a nopass (Set Password) action. The connected documents confirm the vu...