← Database

CVE-2008-3859

MEDIUM CVSS: 5.0 Published: 2008-08-29 Modified: 2026-06-16

Description

Davlin Thickbox Gallery 2 allows remote attackers to obtain the administrative username and MD5 password hash via a direct request to conf/admins.php.

Affected Platforms

Davlin Thickbox Gallery

Weakness Type

CWE-255

References