PT-2008-5466 · Unknown · Easy Photo Gallery

Stack · Published 2008-09-22 · Updated 2017-09-29 · CVE-2008-4167

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:P

Name of the Vulnerable Software and Affected Versions Easy Photo Gallery version 2.1

Description The issue concerns a lack of administrative authentication in the useradmin.php file, allowing remote attackers to add or remove an Administrator account.

Recommendations For Easy Photo Gallery version 2.1, consider restricting access to the useradmin.php file until a patch is available, and ensure that proper authentication mechanisms are implemented to prevent unauthorized modifications to Administrator accounts.

Exploit

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2008-4167

Affected Products

Easy Photo Gallery

References · 6

• 🔥 https://exploit-db.com/exploits/6437 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2008-4167 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/45119 · Note
• http://securityfocus.com/bid/31161 · Note
• http://securityreason.com/securityalert/4282 · Note
• http://secunia.com/advisories/31774 · Note