CVE-2005-0776

adm-photo.php in PhotoPost PHP 5.0 RC3 does not properly verify administrative privileges before manipulating photos, which could allow remote attackers to manipulate other users’ photos.

Date published : 2005-03-20

http://www.securityfocus.com/bid/12779

http://marc.info/?l=bugtraq&m=111065868402859&w=2