high7.5Public exploit code
CVE-2008-2347
MyPicGallery 1.0 allows remote attackers to bypass application authentication and gain administrative access by setting the userID parameter to "admin" in a di…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- MyPicGallery 1.0 - Arbitrary Add Admin2008-05-18 · webapps · php · Verified
Impact
MyPicGallery 1.0 allows remote attackers to bypass application authentication and gain administrative access by setting the userID parameter to "admin" in a direct request to admin/addUser.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mypicgallery | Mypicgallery | Version 1.0 |