Lucene search
HistoryDec 04, 2007 - 6:46 p.m.
CVE-2007-6234
cve-2007-6234
ftp admin
authentication bypass
remote code execution
security vulnerability
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
6.9 Medium
AI Score
Confidence
Low
0.009 Low
EPSS
Percentile
83.1%
index.php in FTP Admin 0.1.0 allows remote attackers to bypass authentication and obtain administrative access via a loggedin parameter with a value of true, as demonstrated by adding a user account.
Affected configurations
Node
ftp_adminftp_adminMatch0.1.0
| CPE | Name | Operator | Version |
|---|---|---|---|
| ftp_admin:ftp_admin | ftp admin | eq | 0.1.0 |
Related
nvd
nvd
CVE-2007-6234
2007-12-04 18:46:00
prion
prion
Authentication flaw
2007-12-04 18:46:00
cvelist
cvelist
CVE-2007-6234
2007-12-04 18:00:00
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
6.9 Medium
AI Score
Confidence
Low
0.009 Low
EPSS
Percentile
83.1%
Related for CVE-2007-6234