NetSight
high7.5Public exploit code

CVE-2008-7027

Libra File Manager 1.18 and earlier allows remote attackers to bypass authentication and gain privileges by setting the user and pass cookies to 1.

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Libra File Manager 1.18 and earlier allows remote attackers to bypass authentication and gain privileges by setting the user and pass cookies to 1.

Affected products

VendorProductAffected versions
Libra File ManagerPhp Filemanager
through 1.18
Versions 1.0, 1.03, 1.05, 1.08, 1.17

Weakness classification

References