Unscored severity · published Jul 24, 2008
CVE-2008-3292
constants.inc in EZWebAlbum 1.0 allows remote attackers to bypass authentication and gain administrator privileges by setting the photoalbumadmin cookie, as demonstrated via…
–
CVSS
7.3%
EPSS
No
On KEV
Description
constants.inc in EZWebAlbum 1.0 allows remote attackers to bypass authentication and gain administrator privileges by setting the photoalbumadmin cookie, as demonstrated via addpage.php.
Exploitation
Is it being used?
Exploit prediction (EPSS)7.3% · higher than 94% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
EZ
Ezwebalbum · Ezwebalbum
1.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-3292
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-3292
securityreason.com
http://securityreason.com/securityalert/4033
Exploit
http://www.securityfocus.com/bid/30343
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/43938
www.exploit-db.com
https://www.exploit-db.com/exploits/6115
More from Ezwebalbum
–
CVE-2008-3293
Directory traversal vulnerability in download.php in EZWebAlbum allows remote attackers to read arbitrary files via the dlfilename parameter