high7.5
CVE-2012-1840
AjaXplorer 3.2.x before 3.2.5 and 4.0.x before 4.0.4 does not properly perform cookie authentication, which allows remote attackers to obtain login access by l…
Impact
AjaXplorer 3.2.x before 3.2.5 and 4.0.x before 4.0.4 does not properly perform cookie authentication, which allows remote attackers to obtain login access by leveraging knowledge of a password hash.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ajaxplorer | Ajaxplorer | Versions 3.2, 3.2.1, 3.2.2, 3.2.3, 3.2.4, 4.0 |