Security Advisory
CVE-2006-2118
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
JMK's Picture Gallery allows remote attackers to bypass authentication via a direct request to admin_gallery.php3, possibly related to the add action.