high7.5Public exploit code
CVE-2008-1507
PEEL, possibly 3.x and earlier, has (1) a default info@peel.fr account with password admin, and (2) a default contact@peel.fr account with password cinema, whi…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- PEEL CMS 3.x - Admin Hash Extraction / Arbitrary File Upload2008-03-19 · webapps · php · Verified
Impact
PEEL, possibly 3.x and earlier, has (1) a default info@peel.fr account with password admin, and (2) a default contact@peel.fr account with password cinema, which allows remote attackers to gain administrative access.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Peel | Peel | through 3.0 Versions 1.0b, 2.6, 2.7 |