critical10.0Public exploit code
CVE-2004-0261
oj.cgi in OpenJournal 2.0 through 2.0.5 allows remote attackers to bypass authentication and access the control panel via a 0 in the uid parameter.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- OpenJournal 2.0 - Authentication Bypassing2004-02-06 · webapps · cgi · Verified
Impact
oj.cgi in OpenJournal 2.0 through 2.0.5 allows remote attackers to bypass authentication and access the control panel via a 0 in the uid parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Openjournal | Openjournal | Versions 2.0, 2.0_1, 2.0_2, 2.0_3, 2.0_4, 2.0_5 |
References
- NVD record
- CVE.org record
- http://marc.info/?l=bugtraq&m=107619136600713&w=2
- http://www.grohol.com/downloads/oj/latest/changelog.txt
- http://www.osvdb.org/3872
- http://www.securityfocus.com/bid/9598
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15069
- http://marc.info/?l=bugtraq&m=107619136600713&w=2
- http://www.grohol.com/downloads/oj/latest/changelog.txt
- http://www.osvdb.org/3872
- http://www.securityfocus.com/bid/9598
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15069