← Database

CVE-2008-3292

MEDIUM CVSS: 6.4 Published: 2008-07-24 Modified: 2026-06-16

Description

constants.inc in EZWebAlbum 1.0 allows remote attackers to bypass authentication and gain administrator privileges by setting the photoalbumadmin cookie, as demonstrated via addpage.php.

Affected Platforms

Ezwebalbum Ezwebalbum

Weakness Type

CWE-287

References