CVE-2008-6790

Published: May 4, 2009Modified: Apr 23, 2026

5.1

Vector

AV:N/AC:H/Au:N/C:P/I:P/A:P

Exploitability: 4.9 / Impact: 6.4

Source: NVD

Description

The admin module in MindDezign Photo Gallery 2.2 allows remote attackers to add administrative users and gain privileges via a modified username parameter in an edit account action to index.php.

Affected (1)

Products: Minddezign: Photo Gallery

Minddezign

1 product

Photo Gallery

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Minddezign Photo Gallery	Version 2.2

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (6)

http://www.securityfocus.com/bid/31897

Source: cve@mitre.org

Exploit

https://exchange.xforce.ibmcloud.com/vulnerabilities/46078

Source: cve@mitre.org

https://www.exploit-db.com/exploits/6820

Source: cve@mitre.org

http://www.securityfocus.com/bid/31897

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

https://exchange.xforce.ibmcloud.com/vulnerabilities/46078

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.exploit-db.com/exploits/6820

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.