Vulnerability Details CVE-2003-1488
The (1) verif_admin.php and (2) check_admin.php scripts in Truegalerie 1.0 allow remote attackers to gain administrator access via a request to admin.php without the connect parameter and with the loggedin parameter set to any value, such as 1.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.046
EPSS Ranking 89.3%
CVSS Severity
CVSS v2 Score 6.4
References
- http://marc.info/?l=vulnwatch&m=105128431109082&w=2
- http://secunia.com/advisories/8683
- http://www.securityfocus.com/bid/7427
- https://exchange.xforce.ibmcloud.com/vulnerabilities/11886
- http://marc.info/?l=vulnwatch&m=105128431109082&w=2
- http://secunia.com/advisories/8683
- http://www.securityfocus.com/bid/7427
- https://exchange.xforce.ibmcloud.com/vulnerabilities/11886
Products affected by CVE-2003-1488
-
cpe:2.3:a:truelogik:truegalerie:1.0