Auth bypass in Libra File Manager Php Filemanager

CVE-2008-7027

Libra File Manager 1.18 and earlier allows remote attackers to bypass authentication and gain privileges by setting the user and pass cookies to 1.

Vulnerability class: Broken Authentication

EPSS: 0.023 (81.4th percentile) — read the EPSS interpretation.

Affected products

Libra_file_manager Php_filemanager — versions 1.0, 1.03, 1.05
N/a — versions n/a

Weakness classification (CWE)

CWE-287 — Improper Authentication

References

cve@mitre.org (exploit, x_refsource_EXPLOIT-DB)
cve@mitre.org (Exploit, vdb-entry, x_refsource_BID)