Security Advisory
CVE-2008-2347
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
MyPicGallery 1.0 allows remote attackers to bypass application authentication and gain administrative access by setting the userID parameter to "admin" in a direct request to admin/addUser.php.