CVEvulnerability
CVE-2006-6246
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2006-12-04
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Description
Photo Organizer 2.32b and earlier does not properly check the ownership of certain objects, which allows remote attackers to gain unauthorized access via vectors related to (1) camera del, (2) camera edit, (3) folder/album deletion, (4) photo.move, (5) content.indexer, (6) folder.content, and possibly other operations.
Affected configurations
• photo organizer photo organizer (<= 2.32b)
References
- http://bugs.shaftnet.org/task/113 bugs.shaftnet.org
- http://po.shaftnet.org/po_stable_changelog Patch
- http://secunia.com/advisories/23176 secunia.com
- http://www.securityfocus.com/bid/21351 Patch
- http://www.vupen.com/english/advisories/2006/4766 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/30577 exchange.xforce.ibmcloud.com
- http://bugs.shaftnet.org/task/113 bugs.shaftnet.org
- http://po.shaftnet.org/po_stable_changelog Patch
- http://secunia.com/advisories/23176 secunia.com
- http://www.securityfocus.com/bid/21351 Patch
- http://www.vupen.com/english/advisories/2006/4766 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/30577 exchange.xforce.ibmcloud.com