CVE-2008-3292
ezwebalbum ezwebalbum: no CVSS score yet. EPSS 7.3% chance of exploitation in the next 30 days.
constants.inc in EZWebAlbum 1.0 allows remote attackers to bypass authentication and gain administrator privileges by setting the photoalbumadmin cookie, as demonstrated via addpage.php.
- EPSS
- 7.3% chance of exploitation in the next 30 days; higher than 94% of CVEs (scores of 2026-10-31)
- CWE
- CWE-287
- Published
- Modified
- Record from
- the NVD, synced
Affected
- ezwebalbum:ezwebalbum