CVE-2008-4484
Crux Gallery <= 1.32 - Unauthenticated Privilege Escalation via Name Parameter
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2008-4484. PoCs published by Pepelux.
AI-analyzed exploit summary The exploit describes an insecure cookie handling vulnerability in Crux Gallery <= 1.32, allowing unauthorized access to the admin panel by manipulating the URL and cookie parameters. It provides examples of URLs to access admin functions without authentication.
Description
main.php in Crux Gallery 1.32 and earlier allows remote attackers to gain administrative access by setting the name parameter to "users," as demonstrated via index.php.
Exploits (1)
The exploit describes an insecure cookie handling vulnerability in Crux Gallery <= 1.32, allowing unauthorized access to the admin panel by manipulating the URL and cookie parameters. It provides examples of URLs to access admin functions without authentication.