CVE-2008-4484 main.php in Crux Gallery 1.32 and earlier allows remote attackers to gain administrative access by setting the name parameter to "users," as demonstrated via index.php.
MediumCVSS 6.8
EPSS 2.6%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
main.php in Crux Gallery 1.32 and earlier allows remote attackers to gain administrative access by setting the name parameter to "users," as demonstrated via index.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| crux software gallery | <= 1.32 | No fix listed |
| crux software gallery | = 1.0 | No fix listed |
| crux software gallery | = 1.1 | No fix listed |
| crux software gallery | = 1.2 | No fix listed |
| crux software gallery | = 1.30 | No fix listed |
| crux software gallery | = 1.31 | No fix listed |
| crux software gallery | = 1.32 | No fix listed |
References
- 32058 third-party-advisory vendor-advisory
- 4365 third-party-advisory
- 20081007 root cause for Crux Gallery cookie-handling issue? mailing-list
- 20080926 Crux Gallery <= 1.32 / Insecure Cookie Handling Vulnerability mailing-list
- 31430 vdb-entry
- cruxgallery-index-security-bypass(45443) vdb-entry
- 6586 exploit