CVE-2008-3292: Ezwebalbum

Medium severity, CVSS 6.4. EPSS: 7.3% chance of exploitation in the next 30 days.

constants.inc in EZWebAlbum 1.0 allows remote attackers to bypass authentication and gain administrator privileges by setting the photoalbumadmin cookie, as demonstrated via addpage.php.

Affected products

• Ezwebalbum Ezwebalbum: version 1.0 only

Published 2008-07-24. Last modified 2026-06-16.