EZWebAlbum suffers from an insecure cookie handling vulnerability that allows anyone to be an administrator.