Description
JMK's Picture Gallery allows remote attackers to bypass authentication via a direct request to admin_gallery.php3, possibly related to the add action.
References
- 821 third-party-advisory
- 17755 vdb-entry
- jmk-admingallery-unauth-access(26210) vdb-entry
- 20060501 JMK's Picture Gallery admin login mailing-list