← Database

CVE-2008-4714

HIGH CVSS: 7.5 Published: 2008-10-23 Modified: 2026-06-16

Description

Atomic Photo Album 1.1.0 pre4 does not properly handle the apa_cookie_login and apa_cookie_password cookies, which probably allows remote attackers to bypass authentication and gain administrative access via modified cookies.

Affected Platforms

Atomic Photo Album Atomic Photo Album

Weakness Type

CWE-287

References