← Database

CVE-2008-4167

MEDIUM CVSS: 6.4 Published: 2008-09-22 Modified: 2026-06-16

Description

useradmin.php in Easy Photo Gallery (aka Ezphotogallery) 2.1 does not require administrative authentication, which allows remote attackers to (1) add or (2) remove an Administrator account.

Affected Platforms

Ezphotogallery Ezphotogallery

Weakness Type

CWE-287

References