CVE-2008-2347 (mypicgallery) [Sitemap] - HeapOverflow Computer Security Community & Forums : Heap Overflow.com

PDA

View Full Version : CVE-2008-2347 (mypicgallery)


Heap
20-05-08, 20:39
MyPicGallery 1.0 allows remote attackers to bypass application authentication and gain administrative access by setting the userID parameter to "admin" in a direct request to admin/addUser.php.

More... (http://nvd.nist.gov/nvd.cfm?cvename=CVE-2008-2347)