medium6.4Public exploit code
CVE-2008-4167
useradmin.php in Easy Photo Gallery (aka Ezphotogallery) 2.1 does not require administrative authentication, which allows remote attackers to (1) add or (2) re…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Easy Photo Gallery 2.1 - Arbitrary Add Admin / remove user2008-09-11 · webapps · php · Verified
Impact
useradmin.php in Easy Photo Gallery (aka Ezphotogallery) 2.1 does not require administrative authentication, which allows remote attackers to (1) add or (2) remove an Administrator account.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ezphotogallery | Ezphotogallery | Version 2.1 |
Weakness classification
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/31774
- http://securityreason.com/securityalert/4282
- http://www.securityfocus.com/bid/31161
- https://exchange.xforce.ibmcloud.com/vulnerabilities/45119
- https://www.exploit-db.com/exploits/6437
- http://secunia.com/advisories/31774
- http://securityreason.com/securityalert/4282
- http://www.securityfocus.com/bid/31161
- https://exchange.xforce.ibmcloud.com/vulnerabilities/45119
- https://www.exploit-db.com/exploits/6437