CVE-2007-3974 admin/ajoutaut.php in JBlog 1.0 does not require authentication, which allows remote attackers to create arbitrary accounts via modified mot and droit parameters.
HighCVSS 7.5
EPSS 3.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
admin/ajoutaut.php in JBlog 1.0 does not require authentication, which allows remote attackers to create arbitrary accounts via modified mot and droit parameters.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| jblog | = 1.0 | No fix listed |
References
- 38561 vdb-entry
- 26165 third-party-advisory
- 2919 third-party-advisory
- 20070720 JBlog 1.0 Creat Admin exploit, xss, Cookie Manipulation mailing-list
- 24991 exploit vdb-entry
- ADV-2007-2611 vdb-entry
- jblog-ajoutaut-authentication-bypass(35550) vdb-entry
- 4211 exploit