CVE-2004-2443
Jaws 0.3 - Unauthenticated Authentication Bypass via MD5 Null Password
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2004-2443. PoCs published by Fernando Quintero.
AI-analyzed exploit summary This exploit demonstrates an authentication bypass vulnerability in JAWS by setting a hardcoded cookie value. The cookie 'logged' is set to a known MD5 hash, allowing unauthorized access to the system.
Description
Jaws 0.3 allows remote attackers to bypass authentication and via an HTTP request to admin.php with the logged cookie set to the MD5 hash of a null password, which is compared against the logged session variable by the logged_on function in application.php.
Exploits (1)
This exploit demonstrates an authentication bypass vulnerability in JAWS by setting a hardcoded cookie value. The cookie 'logged' is set to a known MD5 hash, allowing unauthorized access to the system.