CVE-2009-4987: Scripteen Free Image Hosting Script

High severity, CVSS 7.5. EPSS: 6.4% chance of exploitation in the next 30 days.

admin/header.php in Scripteen Free Image Hosting Script 2.3 allows remote attackers to bypass authentication and gain administrative access by setting the cookgid cookie value to 1, a different vector than CVE-2008-3211.

Affected products

• Scripteen Free Image Hosting Script: version 2.3 only

Published 2010-08-25. Last modified 2026-06-16.