CVE-2008-4167: Ezphotogallery

Medium severity, CVSS 6.4. EPSS: 2.6% chance of exploitation in the next 30 days.

useradmin.php in Easy Photo Gallery (aka Ezphotogallery) 2.1 does not require administrative authentication, which allows remote attackers to (1) add or (2) remove an Administrator account.

Affected products

• Ezphotogallery Ezphotogallery: version 2.1 only

Published 2008-09-22. Last modified 2026-06-16.