CVE-2003-1488

Truelogik Truegalerie - Improper Input Validation

Title source: rule

Description

The (1) verif_admin.php and (2) check_admin.php scripts in Truegalerie 1.0 allow remote attackers to gain administrator access via a request to admin.php without the connect parameter and with the loggedin parameter set to any value, such as 1.

Exploits (1)

exploitdb WORKING POC VERIFIED
by frog · textwebappsphp
https://www.exploit-db.com/exploits/22534

Scores

EPSS 0.0459
EPSS Percentile 89.0%

Classification

CWE
CWE-20
Status draft

Affected Products (1)

truelogik/truegalerie

Timeline

Published Dec 31, 2003
Tracked Since Feb 18, 2026