PT-2008-3255 · Terong · Terong Php Photo Gallery

T0Pp8Uzz + 1 · Published 2008-04-09 · Updated 2017-09-29 · CVE-2008-1711

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Terong PHP Photo Gallery (aka Advanced Web Photo Gallery) version 1.0

Description The issue allows context-dependent attackers to obtain sensitive information because passwords are stored in cleartext in a MySQL database.

Recommendations For Terong PHP Photo Gallery (aka Advanced Web Photo Gallery) version 1.0, consider implementing password hashing to securely store user credentials, and restrict access to the MySQL database to minimize the risk of exploitation.

Exploit

Fix

Weakness Enumeration

CWE-310

Related Identifiers

CVE-2008-1711

Affected Products

Terong Php Photo Gallery

References · 4

• 🔥 https://exploit-db.com/exploits/5364 · Exploit
• http://secunia.com/advisories/29667 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2008-1711 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/41820 · Note