CVE-2004-2443: Jaws

High severity, CVSS 7.5. EPSS: 8.8% chance of exploitation in the next 30 days.

Jaws 0.3 allows remote attackers to bypass authentication and via an HTTP request to admin.php with the logged cookie set to the MD5 hash of a null password, which is compared against the logged session variable by the logged_on function in application.php.

Affected products

• Jaws Jaws: version 0.2 only; version 0.3 only

Published 2004-12-31. Last modified 2026-06-16.