← Back

Photorange Photo Vault

photorange_photo_vault

Vendor: Photorange Photo Vault Project • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2018-20371
1Photorange Photo Vault Project
1Photorange Photo Vault
Nov 21, 2024
Dec 23, 2018
N/A· v4
9.8 CRITICAL· v3
5.0 MEDIUM· v2
PhotoRange Photo Vault 1.2 appends the password to the URI for authorization, which makes it easier for remote attackers to bypass intended GET restrictions via a brute-force approach, as demonstrated by "GET /login.html...Show more
PhotoRange Photo Vault 1.2 appends the password to the URI for authorization, which makes it easier for remote attackers to bypass intended GET restrictions via a brute-force approach, as demonstrated by "GET /login.html__passwd1" and "GET /login.html__passwd2" and so on.Show less