VULNERABILITY INTELLIGENCE
CVE-2008-3292
CVSS score6.4 MEDIUM
EPSS probability7.32%
CISA KEVNot currently listed
Published2008-07-24
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:P/I:P/A:N
Description
constants.inc in EZWebAlbum 1.0 allows remote attackers to bypass authentication and gain administrator privileges by setting the photoalbumadmin cookie, as demonstrated via addpage.php.
Weakness classification
- CWE-287: Improper Authentication