Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-rggq-3jwv-vjh4

Опубликовано: 01 мая 2022
Источник: github
Github: Не прошло ревью

Описание

MyPicGallery 1.0 allows remote attackers to bypass application authentication and gain administrative access by setting the userID parameter to "admin" in a direct request to admin/addUser.php.

MyPicGallery 1.0 allows remote attackers to bypass application authentication and gain administrative access by setting the userID parameter to "admin" in a direct request to admin/addUser.php.

EPSS

Процентиль: 84%
0.02259
Низкий

Дефекты

CWE-287

Связанные уязвимости

nvd
больше 17 лет назад

MyPicGallery 1.0 allows remote attackers to bypass application authentication and gain administrative access by setting the userID parameter to "admin" in a direct request to admin/addUser.php.

EPSS

Процентиль: 84%
0.02259
Низкий

Дефекты

CWE-287