Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
isadmin.php in PhpWebGallery 1.0 allows remote attackers to gain administrative access via by setting the photo_login cookie to pseudo.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
PhpWebGallery用户账号Cookie验证漏洞
Vulnerability Description
PhpWebGallery是一款由Pierrick Le Gall维护的允许用户建立图库的系统，可使用在多种Linux和Unix操作系统下。 PhpWebGallery对用户验证缺少正确充分的检查，可导致远程攻击者以其他用户权限访问PhpWebGallery系统。 PhpWebGallery使用Cookie进行认证，不过Cookie以明文方式存储在用户系统中，攻击者可以修改他们的Cookie数据，并以服务中任意用户的权限访问PhpWebGallery系统，包括管理员用户权限。
CVSS Information
N/A
Vulnerability Type
N/A