CVE-2003-1488

2007-10-2423:00:00

mitre

www.cve.org

AI Score

6.9

Confidence

High

EPSS

0.01

Percentile

84.2%

JSON

The (1) verif_admin.php and (2) check_admin.php scripts in Truegalerie 1.0 allow remote attackers to gain administrator access via a request to admin.php without the connect parameter and with the loggedin parameter set to any value, such as 1.

References

marc.info/?l=vulnwatch&m=105128431109082&w=2

secunia.com/advisories/8683

www.securityfocus.com/bid/7427

exchange.xforce.ibmcloud.com/vulnerabilities/11886