PhpWebGallery is a web application which enables users to create image galleries, and is maintained by Pierrick Le Gall. PhpWebGallery use cookies for authentication. When a user is issued a cookie, the cookie is stored in a non-encrypted format. It is possible for a malicious user to manipulate values in their cookie and authenticate as an arbitrary user of the service, including the administrative account.
PhpWebGallery is a web application which enables users to create image galleries, and is maintained by Pierrick Le Gall. PhpWebGallery use cookies for authentication. When a user is issued a cookie, the cookie is stored in a non-encrypted format. It is possible for a malicious user to manipulate values in their cookie and authenticate as an arbitrary user of the service, including the administrative account.