EDB-25102
functionalCitrusDB 0.3.6 - Remote Authentication Bypass
view exploit source exploit_dbverifiedtype webappsauthor RedTeam Pentestingpublished 2004-02-15catalog exploit_db
01
exploited CVEs (1)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2005-0408US | critical9.8 | Exploit | ||
CitrusDB 0.3.6 and earlier generates easily predictable MD5 hashes of the user name for the id_hash cookie, which allows remote attackers to bypass authentication and gain privileg… | ||||
scry
Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.
Free scan