Ezwebalbum

ezwebalbum

Vendor: Ezwebalbum • 2 CVEs

CVEs (2)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2008-3293 1Ezwebalbum 1Ezwebalbum Apr 23, 2026 Jul 24, 2008 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Directory traversal vulnerability in download.php in EZWebAlbum allows remote attackers to read arbitrary files via the dlfilename parameter.
CVE-2008-3292 1Ezwebalbum 1Ezwebalbum Apr 23, 2026 Jul 24, 2008 N/A· v4 N/A· v3 6.4 MEDIUM· v2 constants.inc in EZWebAlbum 1.0 allows remote attackers to bypass authentication and gain administrator privileges by setting the photoalbumadmin cookie, as demonstrated via addpage.php.