| Package | Affected versions | Patched versions |
|---|---|---|
| jaws | = 0.2= 0.3 |
Jaws 0.3 allows remote attackers to bypass authentication and via an HTTP request to admin.php with the logged cookie set to the MD5 hash of a null password, which is compared against the logged session variable by the logged_on function in application.php.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free