CVE-2008-3292
EZWebAlbum 1.0 - Auth Bypass
Title source: llmDescription
constants.inc in EZWebAlbum 1.0 allows remote attackers to bypass authentication and gain administrator privileges by setting the photoalbumadmin cookie, as demonstrated via addpage.php.
Exploits (1)
exploitdb
WORKING POC
VERIFIED
by Virangar Security · textwebappsphp
https://www.exploit-db.com/exploits/6115
Scores
EPSS
0.0165
EPSS Percentile
81.8%
Classification
CWE
CWE-287
Status
draft
Affected Products (1)
ezwebalbum/ezwebalbum
Timeline
Published
Jul 24, 2008
Tracked Since
Feb 18, 2026