PT-2008-5466 · Unknown · Easy Photo Gallery

Stack · Publicado 2008-09-22 · Atualizado 2017-09-29 · CVE-2008-4167

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:P/A:P

Name of the Vulnerable Software and Affected Versions Easy Photo Gallery version 2.1

Description The issue concerns a lack of administrative authentication in the useradmin.php file, allowing remote attackers to add or remove an Administrator account.

Recommendations For Easy Photo Gallery version 2.1, consider restricting access to the useradmin.php file until a patch is available, and ensure that proper authentication mechanisms are implemented to prevent unauthorized modifications to Administrator accounts.

Exploit

Correção

Improper Authentication

Enumeração de Fraquezas

CWE-287

Identificadores relacionados

CVE-2008-4167

Produtos afetados

Easy Photo Gallery

Referências · 6

• 🔥 https://exploit-db.com/exploits/6437 · Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/45119 · Nota
• http://securityfocus.com/bid/31161 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-4167 · Nota de Segurança
• http://securityreason.com/securityalert/4282 · Nota
• http://secunia.com/advisories/31774 · Nota