CVE-2004-2443

CVE-2004-2443 describes an authentication bypass vulnerability in Jaws versions 0.2 and 0.3. Remote attackers can gain unauthorized access by manipulating the 'logged' cookie in an HTTP request to admin.php, setting it to the MD5 hash of a null password. This flaw is rated with a CVSS score of 7.5, indicating high severity due to its network-based attack vector, low complexity, and potential for complete compromise of confidentiality, integrity, and availability. While not listed in CISA's KEV catalog, exploit code is publicly available on ExploitDB, though there is no evidence of active exploitation, Metasploit modules, or significant community discussion or media coverage.