high7.5Public exploit code
CVE-2008-7027
Libra File Manager 1.18 and earlier allows remote attackers to bypass authentication and gain privileges by setting the user and pass cookies to 1.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Libra PHP File Manager 1.18 - Insecure Cookie Handling2008-09-26 · webapps · php · Verified
Impact
Libra File Manager 1.18 and earlier allows remote attackers to bypass authentication and gain privileges by setting the user and pass cookies to 1.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Libra File Manager | Php Filemanager | through 1.18 Versions 1.0, 1.03, 1.05, 1.08, 1.17 |