PT-2004-1415 · Unknown · Openjournal

Tri Huynh · Published 2004-09-01 · Updated 2018-05-03 · CVE-2004-0261

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions OpenJournal versions 2.0 through 2.0.5

Description The issue allows remote attackers to bypass authentication and access the control panel. This is achieved by setting a 0 in the uid parameter in the oj.cgi endpoint.

Recommendations For OpenJournal versions 2.0 through 2.0.5, as a temporary workaround, consider restricting access to the oj.cgi endpoint until a patch is available. Avoid using the uid parameter with a value of 0 in the affected endpoint.

Exploit

Fix

Related Identifiers

CVE-2004-0261

Affected Products

Openjournal

References · 7

• 🔥 https://exploit-db.com/exploits/23659 · Exploit
• 🔥 http://securityfocus.com/bid/9598 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2004-0261 · Security Note
• http://marc.info/?l=bugtraq&m=107619136600713&w=2 · Note
• http://osvdb.org/3872 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15069 · Note
• http://grohol.com/downloads/oj/latest/changelog.txt · Note