medium6.4Public exploit code
CVE-2008-3292
constants.inc in EZWebAlbum 1.0 allows remote attackers to bypass authentication and gain administrator privileges by setting the photoalbumadmin cookie, as de…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- EZWebAlbum - Insecure Cookie Handling2008-07-21 · webapps · php · Verified
Impact
constants.inc in EZWebAlbum 1.0 allows remote attackers to bypass authentication and gain administrator privileges by setting the photoalbumadmin cookie, as demonstrated via addpage.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ezwebalbum | Ezwebalbum | Version 1.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://securityreason.com/securityalert/4033
- http://www.securityfocus.com/bid/30343
- https://exchange.xforce.ibmcloud.com/vulnerabilities/43938
- https://www.exploit-db.com/exploits/6115
- http://securityreason.com/securityalert/4033
- http://www.securityfocus.com/bid/30343
- https://exchange.xforce.ibmcloud.com/vulnerabilities/43938
- https://www.exploit-db.com/exploits/6115