high7.5Public exploit code
CVE-2008-4714
Atomic Photo Album 1.1.0 pre4 does not properly handle the apa_cookie_login and apa_cookie_password cookies, which probably allows remote attackers to bypass a…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Atomic Photo Album 1.1.0pre4 - Insecure Cookie Handling2008-09-26 · webapps · php · Verified
Impact
Atomic Photo Album 1.1.0 pre4 does not properly handle the apa_cookie_login and apa_cookie_password cookies, which probably allows remote attackers to bypass authentication and gain administrative access via modified cookies.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Atomic Photo Album | Atomic Photo Album | Version 1.1.0 |