CVE-2008-4714: Atomic Photo Album

High severity, CVSS 7.5. EPSS: 2.6% chance of exploitation in the next 30 days.

Atomic Photo Album 1.1.0 pre4 does not properly handle the apa_cookie_login and apa_cookie_password cookies, which probably allows remote attackers to bypass authentication and gain administrative access via modified cookies.

Affected products

• Atomic Photo Album Atomic Photo Album: version 1.1.0 only

Published 2008-10-23. Last modified 2026-06-16.