Show filters
2 Total Results
Displaying 1-2 of 2
Sort by:
Attacker Value
Unknown
CVE-2003-1489
Disclosure Date: December 31, 2003 (last updated February 22, 2025)
upload.php in Truegalerie 1.0 allows remote attackers to read arbitrary files by specifying the target filename in the file cookie in form.php, then downloading the file from the image gallery.
0
Attacker Value
Unknown
CVE-2003-1488
Disclosure Date: December 31, 2003 (last updated February 22, 2025)
The (1) verif_admin.php and (2) check_admin.php scripts in Truegalerie 1.0 allow remote attackers to gain administrator access via a request to admin.php without the connect parameter and with the loggedin parameter set to any value, such as 1.
0
