VULNERABILITY INTELLIGENCE
CVE-2008-6790
CVSS score5.1 MEDIUM
EPSS probability1.98%
CISA KEVNot currently listed
Published2009-05-04
Last modified2026-06-16
CVSS vectorAV:N/AC:H/Au:N/C:P/I:P/A:P
Description
The admin module in MindDezign Photo Gallery 2.2 allows remote attackers to add administrative users and gain privileges via a modified username parameter in an edit account action to index.php.
Weakness classification
- CWE-20: Improper Input Validation