CVE-2003-1488 The (1) verif_admin.php and (2) check_admin.php scripts in Truegalerie 1.0 allow remote attackers to gain administrator access via a request to admin.php without the connect parameter and with the log...
MediumCVSS 6.4
EPSS 2.1%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
The (1) verif_admin.php and (2) check_admin.php scripts in Truegalerie 1.0 allow remote attackers to gain administrator access via a request to admin.php without the connect parameter and with the loggedin parameter set to any value, such as 1.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| truelogik truegalerie | = 1.0 | No fix listed |
References
- 20030425 True Galerie 1.0 : Admin Access & File Copy mailing-list
- 8683 third-party-advisory vendor-advisory
- 7427 exploit vdb-entry
- truegalerie-verifadmin-admin-access(11886) vdb-entry