CVE-2008-4167
ezphotogallery 2.1 - Unauthenticated Administrator Account Manipulation via useradmin.php
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2008-4167. PoCs published by Stack.
AI-analyzed exploit summary This exploit describes an authentication bypass vulnerability in Ezphotogallery 2.1, allowing an attacker to add an admin user or remove existing users via direct access to the useradmin.php page without proper authentication.
Description
useradmin.php in Easy Photo Gallery (aka Ezphotogallery) 2.1 does not require administrative authentication, which allows remote attackers to (1) add or (2) remove an Administrator account.
Exploits (1)
This exploit describes an authentication bypass vulnerability in Ezphotogallery 2.1, allowing an attacker to add an admin user or remove existing users via direct access to the useradmin.php page without proper authentication.