CVE-2008-3292

constants.inc in EZWebAlbum 1.0 allows remote attackers to bypass authentication and gain administrator privileges by setting the photoalbumadmin cookie, as demonstrated via addpage.php.

Date published : 2008-07-24

http://www.securityfocus.com/bid/30343

https://www.exploit-db.com/exploits/6115