CVE-2007-5913

CVE-2007-5913 concerns dirsys/modules/auth.php in JBC Explorer 7.20 RC1 and earlier, where authentication is not required and remote attackers can (1) delete auth.inc.php via the suppr parameter and (2) re-create auth.inc.php to establish a new account/password using login and password parameters...