Security Advisory

CVE-2012-4926

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2012-09-15 17:00:00

Last updated 2024-09-16 23:05:52

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

approve.php in Img Pals Photo Host 1.0 does not authenticate requests, which allows remote attackers to change the activation of administrators via the u parameter in an (1) app0 (disable) or (2) app1 (enable) action.

← Browse all CVEs View on cve.org ↗