The (1) verif_admin.php and (2) check_admin.php scripts in Truegalerie 1.0 allow remote attackers to gain administrator access via a request to admin.php without the connect parameter and with the loggedin parameter set to any value, such as 1.
                
            References
                    Configurations
                    History
                    20 Nov 2024, 23:47
| Type | Values Removed | Values Added | 
|---|---|---|
| References | () http://marc.info/?l=vulnwatch&m=105128431109082&w=2 - | |
| References | () http://secunia.com/advisories/8683 - Vendor Advisory | |
| References | () http://www.securityfocus.com/bid/7427 - Exploit | |
| References | () https://exchange.xforce.ibmcloud.com/vulnerabilities/11886 - | 
Information
                Published : 2003-12-31 05:00
Updated : 2025-04-03 01:03
NVD link : CVE-2003-1488
Mitre link : CVE-2003-1488
CVE.ORG link : CVE-2003-1488
JSON object : View
Products Affected
                truelogik
- truegalerie
CWE
                
                    
                        
                        CWE-20
                        
            Improper Input Validation
