← Database

CVE-2009-4987

HIGH CVSS: 7.5 Published: 2010-08-25 Modified: 2026-06-16

Description

admin/header.php in Scripteen Free Image Hosting Script 2.3 allows remote attackers to bypass authentication and gain administrative access by setting the cookgid cookie value to 1, a different vector than CVE-2008-3211.

Affected Platforms

Scripteen Free Image Hosting Script

Weakness Type

CWE-287

References