Authentication flaw

2007-12-0418:46:00

PRIOn knowledge base

www.prio-n.com

7.5 High

AI Score

Confidence

Low

0.009 Low

EPSS

Percentile

83.2%

JSON

index.php in FTP Admin 0.1.0 allows remote attackers to bypass authentication and obtain administrative access via a loggedin parameter with a value of true, as demonstrated by adding a user account.

CPENameOperatorVersion
ftp_admineq0.1.0

CPE	Name	Operator	Version
	ftp_admin	eq	0.1.0

References

secunia.com/advisories/27875

exchange.xforce.ibmcloud.com/vulnerabilities/38782

www.exploit-db.com/exploits/4681