Lucene search
+L

JFFNms 0.8.3 - 'admin/setup.php' Direct Request Authentication Bypass

🗓️ 11 Jun 2007 00:00:00Reported by Tim BrownType 
exploitdb
 exploitdb
🔗 www.exploit-db.com👁 28 Views

JFFNMS 0.8.3 Admin Authentication Bypas

Related
Code
ReporterTitlePublishedViews
Family
CVE
CVE-2007-3192
12 Jun 200723:00
cve
Cvelist
CVE-2007-3192
12 Jun 200723:00
cvelist
Debian
[SECURITY] [DSA 1374-1] New jffnms packages fix several vulnerabilities
11 Sep 200718:57
debian
Tenable Nessus
Debian DSA-1374-1 : jffnms - several vulnerabilities
14 Sep 200700:00
nessus
EUVD
EUVD-2007-3184
7 Oct 202500:30
euvd
NVD
CVE-2007-3192
12 Jun 200723:30
nvd
OpenVAS
Debian: Security Advisory (DSA-1374-1)
17 Jan 200800:00
openvas
OpenVAS
Debian Security Advisory DSA 1374-1 (jffnms)
17 Jan 200800:00
openvas
OSV
DSA-1374-1 jffnms - several vulnerabilities
11 Sep 200700:00
osv
Prion
Design/Logic Flaw
12 Jun 200723:30
prion
Rows per page
source: https://www.securityfocus.com/bid/24414/info

Just For Fun Network Management and Monitoring System (JFFNMS) is prone to multiple remote vulnerabilities, including a cross-site scripting issue, an SQL-injection issue, and multiple information-disclosure issues.

An attacker can exploit these issues by manipulating the SQL query logic to carry out unauthorized actions on the underlying database, access sensitive information, and obtain cookie-based authentication credentials.

These issues affect versions prior to JFFNMS 0.8.4-pre3.

http://192.168.1.1/admin/setup.php

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

10 Dec 2013 00:00Current
7.4High risk
Vulners AI Score7.4
CVSS 29.4
EPSS0.03556
28