MEDIUM
Gallarific Free Edition 1.1 does not require authentication for (1) photos.php, (2) comments.php, and (3) gallery.php in gadmin/, which allows remote attackers to edit objects via a direct request, different vectors than CVE-2008-1327
Published Mar 24, 2008
6.4
MEDIUMCVSS 2.0
EPSS 1.18%
Description
Affected products
Remediation
Metrics
References (1)
Change history (0)
No recorded changes yet.