![]() | |
| |||||||
| Home | Register | Projects | Blogs | FAQ | Calendar | Search | Today's Posts | Mark Forums Read | Free Directory | Free DNSReport | Tags |
| Notices |
| Advisories Discuss about all newly security flaws classed by CVE entries and reviewed by security experts |
CVE-2007-5913 (JBC Explorer)This is a discussion on "CVE-2007-5913 (JBC Explorer)" within the Advisories part of the Computer Security: Discussions section; dirsys/modules/auth.php in JBC Explorer 7.20 RC1 and earlier does not require authentication, which allows remote attackers to (1) delete auth.inc.php via the suppr parameter, and (2) re-create the auth.inc.php file with ... |
![]() |
| | LinkBack | Thread Tools | Display Modes |
| |||
| dirsys/modules/auth.php in JBC Explorer 7.20 RC1 and earlier does not require authentication, which allows remote attackers to (1) delete auth.inc.php via the suppr parameter, and (2) re-create the auth.inc.php file with contents that specify a new account name and password for JBC Explorer via the login and password parameters. More... |
| Sponsor | ||
| ||
| |
![]() |
| | |
| cve20075913, explorer, jbc | |
| Thread Tools | |
| Display Modes | |
| |
Similar Threads | ||||
| Thread | Thread Starter | Forum | Replies | Last Post |
| CVE-2007-5914 (JBC Explorer) | Heap | Advisories | 0 | 12-11-07 17:44 |
| JBC Explorer V7.20 RC 1 Remote Code Execution Exploit | Heap | Public | 0 | 05-11-07 18:08 |
| Microsoft Service Packs Going Out of Support - May 2007 | class101 | Security discussions | 0 | 02-05-07 01:08 |