CVEvulnerability
CVE-2002-2064
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2002-12-31
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Description
isadmin.php in PhpWebGallery 1.0 allows remote attackers to gain administrative access via by setting the photo_login cookie to pseudo.
Affected configurations
• phpwebgallery phpwebgallery 1.0
Related
Referenced by CWE · observed example (1)
- CWE-302 Authentication Bypass by Assumed-Immutable Data weakness
References
- http://seclists.org/lists/vuln-dev/2002/Apr/0270.html seclists.org
- http://www.ifrance.com/kitetoua/tuto/PWG.txt Vendor Advisory
- http://www.securityfocus.com/bid/4622 Patch
- http://seclists.org/lists/vuln-dev/2002/Apr/0270.html seclists.org
- http://www.ifrance.com/kitetoua/tuto/PWG.txt Vendor Advisory
- http://www.securityfocus.com/bid/4622 Patch