critical10.0Public exploit code
CVE-2007-2985
Pheap 2.0 allows remote attackers to bypass authentication by setting a pheap_login cookie value to the administrator's username, which can be used to (1) obta…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Pheap 2.0 - Authentication Bypass / Remote Code Execution2007-05-29 · webapps · php · Verified
Impact
Pheap 2.0 allows remote attackers to bypass authentication by setting a pheap_login cookie value to the administrator's username, which can be used to (1) obtain sensitive information, including the administrator password, via settings.php or (2) upload and execute arbitrary PHP code via an update_doc action in edit.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Pheap | Pheap | Version 2.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://osvdb.org/36737
- http://secunia.com/advisories/25460
- https://exchange.xforce.ibmcloud.com/vulnerabilities/34592
- https://www.exploit-db.com/exploits/4006
- http://osvdb.org/36737
- http://secunia.com/advisories/25460
- https://exchange.xforce.ibmcloud.com/vulnerabilities/34592
- https://www.exploit-db.com/exploits/4006