Security Advisory

CVE-2008-5296

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2008-12-01 15:00:00
Last updated 2024-08-07 10:49:12
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

Gallery 1.5.x before 1.5.10 and 1.6 before 1.6-RC3, when register_globals is enabled, allows remote attackers to bypass authentication and gain administrative via unspecified cookies. NOTE: some of these details are obtained from third party information.