Ezwebalbum: >> Ezwebalbum >> 1.0 Security Vulnerabilities
constants.inc in EZWebAlbum 1.0 allows remote attackers to bypass authentication and gain administrator privileges by setting the photoalbumadmin cookie, as demonstrated via addpage.php.
CVSS Score
6.4
EPSS Score
0.022
Published
2008-07-24
Directory traversal vulnerability in download.php in EZWebAlbum allows remote attackers to read arbitrary files via the dlfilename parameter.
CVSS Score
5.0
EPSS Score
0.071
Published
2008-07-24