CVE-2004-2443

Jaws 0.3 allows remote attackers to bypass authentication and via an HTTP request to admin.php with the logged cookie set to the MD5 hash of a null password…

published August 20, 2005

CVSS
—
EPSS
9%
Percentile
95.2
In the wild
Unconfirmed
What it is

Jaws 0.3 allows remote attackers to bypass authentication and via an HTTP request to admin.php with the logged cookie set to the MD5 hash of a null password, which is compared against the logged session variable by the logged_on function in application.php.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.08848 · 95.2th percentile
Published
2005-08-20T04:00Z
EPSS history
Timeline
  • 20 AUG 04:00Z
    Jaws 0.3 allows remote attackers to bypass authentication and via an HTTP request to admin.php with the logged cookie set to the MD5 hash of a null password…
    cvelistv5