high7.5Public exploit code
CVE-2008-2282
admin.php in Internet Photoshow and Internet Photoshow Special Edition (SE) allows remote attackers to bypass authentication by setting the login_admin cookie …
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Internet PhotoShow (Special Edition) - Insecure Cookie Handling2008-05-14 · webapps · php · Verified
Impact
admin.php in Internet Photoshow and Internet Photoshow Special Edition (SE) allows remote attackers to bypass authentication by setting the login_admin cookie to true.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Thomas Voecking | Internet Photoshow | Version null |