CVE-2007-1156 JBrowser allows remote attackers to bypass authentication and access certain administrative capabilities via a direct request for _admin/.
HighCVSS 7.5
EPSS 9.0%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
JBrowser allows remote attackers to bypass authentication and access certain administrative capabilities via a direct request for _admin/.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| man machine systems jbrowser | All versions | No fix listed |
References
- forums.avenir-geopolitique.net
- 33141 vdb-entry
- 2370 third-party-advisory
- 1008909 vdb-entry
- 20070222 JBrowser acces to admin/config files mailing-list
- 20070223 JBrowser Acces to Admin Panel Exploit mailing-list
- 9537 vdb-entry