← Database

CVE-2008-2347

HIGH CVSS: 7.5 Published: 2008-05-20 Modified: 2026-06-16

Description

MyPicGallery 1.0 allows remote attackers to bypass application authentication and gain administrative access by setting the userID parameter to "admin" in a direct request to admin/addUser.php.

Affected Platforms

Mypicgallery Mypicgallery

Weakness Type

CWE-287

References