forums.avenir-geopolitique.net
http://forums.avenir-geopolitique.net/viewtopic.php?t=2693 CVE-2007-1156
JBrowser 1.0/2.x - Unauthorized Admin Access
Record summary
CVE-2007-1156 has a selected CVSS score of 7.5; EIP currently links 1 catalogued exploit.
Description
JBrowser allows remote attackers to bypass authentication and access certain administrative capabilities via a direct request for _admin/.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBJBrowser 1.0/2.x - Unauthorized Admin AccessExploitDB exploitby Himeur NourredineNot analyzed1 file
References
833141vdb entry
http://osvdb.org/33141 2370Third-party advisory
http://securityreason.com/securityalert/2370 1008909vdb entry
http://securitytracker.com/id?1008909 20070222 JBrowser acces to admin/config filesmailing list
http://www.securityfocus.com/archive/1/460923/100/0/threaded 20070223 JBrowser Acces to Admin Panel Exploitmailing list
http://www.securityfocus.com/archive/1/461298/100/100/threaded 9537vdb entry
http://www.securityfocus.com/bid/9537 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2007-1156