CVE-2008-2347 MyPicGallery 1.0 allows remote attackers to bypass application authentication and gain administrative access by setting the userID parameter to "admin" in a direct request to admin/addUser.php.
HighCVSS 7.5
EPSS 2.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
MyPicGallery 1.0 allows remote attackers to bypass application authentication and gain administrative access by setting the userID parameter to "admin" in a direct request to admin/addUser.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mypicgallery | = 1.0 | No fix listed |
References
- 29272 exploit vdb-entry
- mypicgallery-adduser-security-bypass(42507) vdb-entry
- 5650 exploit