Description
Pixelpost 1-5rc1-2 and earlier, when register_globals is enabled, allows remote attackers to gain administrator privileges and conduct other attacks by setting the _SESSION["pixelpost_admin"] parameter to 1 in calls to admin scripts such as admin/view_info.php.
References
- 20060603 Pixelpost <= 1-5rc1-2 multiple vulnerabilities mailing-list
- http://retrogod.altervista.org/pixelpost_15rc12_xpl.html
- 1061 third-party-advisory
- 18276 vdb-entry
- 1016217 vdb-entry