Auth bypass in Thomas Voecking Internet Photoshow

CVE-2008-2282

admin.php in Internet Photoshow and Internet Photoshow Special Edition (SE) allows remote attackers to bypass authentication by setting the login_admin cookie to true.

Vulnerability class: Broken Authentication

EPSS: 0.030 (86.2th percentile) — read the EPSS interpretation.

Affected products

Thomas_voecking Internet_photoshow — versions null
N/a — versions n/a

Weakness classification (CWE)

CWE-287 — Improper Authentication

References

cve@mitre.org (exploit, x_refsource_EXPLOIT-DB)
cve@mitre.org (vdb-entry, x_refsource_XF)
cve@mitre.org (vdb-entry, x_refsource_BID)