CVE-2007-6234

2007-12-0418:00:00

mitre

www.cve.org

6.9 Medium

AI Score

Confidence

Low

0.009 Low

EPSS

Percentile

83.2%

JSON

index.php in FTP Admin 0.1.0 allows remote attackers to bypass authentication and obtain administrative access via a loggedin parameter with a value of true, as demonstrated by adding a user account.

References

secunia.com/advisories/27875

exchange.xforce.ibmcloud.com/vulnerabilities/38782

www.exploit-db.com/exploits/4681