CVE-2008-4167

Published: Sep 22, 2008Modified: Apr 23, 2026

6.4

Vector

AV:N/AC:L/Au:N/C:N/I:P/A:P

Exploitability: 10.0 / Impact: 4.9

Source: NVD

Description

useradmin.php in Easy Photo Gallery (aka Ezphotogallery) 2.1 does not require administrative authentication, which allows remote attackers to (1) add or (2) remove an Administrator account.

Affected (1)

Products: Ezphotogallery: Ezphotogallery

Ezphotogallery

1 product

Ezphotogallery

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Ezphotogallery Ezphotogallery	Version 2.1

Related CWEs

CWE-287

Improper Authentication

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

References (10)

http://secunia.com/advisories/31774

Source: cve@mitre.org

http://securityreason.com/securityalert/4282

Source: cve@mitre.org

http://www.securityfocus.com/bid/31161

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/45119

Source: cve@mitre.org

https://www.exploit-db.com/exploits/6437

Source: cve@mitre.org

http://secunia.com/advisories/31774