Info

Disclosure

Jul 21, 2007

Discovery

Unknown

Dates

Exploit

Unknown

Solution

Unknown

Description

JBlog contains a flaw that may allow an attacker to create accounts. The issue is triggered due to improper authentication on admin/ajoutaut.php.

Classification

Location: Remote / Network Access
Attack Type: Authentication Management
Impact: Loss of Integrity
Solution: Solution Unknown
Exploit: Exploit Public
Disclosure: Third-party Verified, Uncoordinated Disclosure
OSVDB: Web Related

Solution

OSVDB is not aware of a solution for this vulnerability.

Products

MULLER Julien

JBlog

1.0

References

CVE ID: 2007-3973 (see also: NVD) 2007-3974 (see also: NVD) 2007-4919 (see also: NVD)
Bugtraq ID: 24991
Secunia Advisory ID: 26165
ISS X-Force ID: 35550 35551 35556
Related OSVDB ID: 38557 38558 38559 38561
Milw0rm: 4211
Exploit Database: 4211
VUPEN Advisory: ADV-2007-2611
Mail List Post: http://archives.neohapsis.com/archives/bugtraq/2007-07/0228.html
Other Advisory URL: http://securityreason.com/securityalert/2919
Vendor URL: http://www.jmuller.net/jblog/

Credit

Unknown or Incomplete

Direct URL: http://osvdb.org/38561