CVEvulnerability

CVE-2012-4926

6.4 MEDIUM Published 2012-09-15 Modified 2026-06-16 Official page ↗

Status: Modified
Published: 2012-09-15
Last modified: 2026-06-16
Assigner: [email protected]
CVSS 2.0 ([email protected]): 6.4 MEDIUM — AV:N/AC:L/Au:N/C:N/I:P/A:P
Weaknesses: CWE-287

Description

approve.php in Img Pals Photo Host 1.0 does not authenticate requests, which allows remote attackers to change the activation of administrators via the u parameter in an (1) app0 (disable) or (2) app1 (enable) action.

Affected configurations

• imgpals img pals photo host 1.0

Weakness · CWE (1)

CWE-287 Improper Authentication weakness

References

http://archives.neohapsis.com/archives/bugtraq/2012-02/0180.html Exploit
http://www.exploit-db.com/exploits/18544 Exploit
http://archives.neohapsis.com/archives/bugtraq/2012-02/0180.html Exploit
http://www.exploit-db.com/exploits/18544 Exploit

CVE-2012-4926

Description

Affected configurations

Related

Weakness · CWE (1)

References