Lucene search

MitreCVE-2007-5913

HistoryNov 10, 2007 - 2:46 a.m.

CVE-2007-5913

2007-11-1002:46:00

CWE-287

mitre

web.nvd.nist.gov

cve-2007-5913

nvd

dirsys

auth.php

authentication bypass

jbc explorer

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

6.8

Confidence

Low

EPSS

0.022

Percentile

89.7%

JSON

dirsys/modules/auth.php in JBC Explorer 7.20 RC1 and earlier does not require authentication, which allows remote attackers to (1) delete auth.inc.php via the suppr parameter, and (2) re-create the auth.inc.php file with contents that specify a new account name and password for JBC Explorer via the login and password parameters.

Affected configurations

Nvd

Node

jean_charlesjbc_explorerRange≤7.20_rc1

VendorProductVersionCPE
jean_charlesjbc_explorer*cpe:2.3:a:jean_charles:jbc_explorer:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
jean_charles	jbc_explorer	*	cpe:2.3:a:jean_charles:jbc_explorer::::::::

References

mgsdl.free.fr/?1:33

osvdb.org/42069

secunia.com/advisories/27533

securityreason.com/securityalert/3358

www.securityfocus.com/archive/1/483268/100/0/threaded

www.securityfocus.com/bid/26332

exchange.xforce.ibmcloud.com/vulnerabilities/38269

www.exploit-db.com/exploits/4608

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

6.8

Confidence

Low

EPSS

0.022

Percentile

89.7%

JSON

Related for CVE-2007-5913