Exploitation Summary
EIP tracks 3 public exploits for CVE-2000-0074. PoCs published by ytcracker, missnglnk, Synnergy Networks.
AI-analyzed exploit summary This exploit demonstrates an authentication bypass vulnerability in PowerScripts PlusMail Web Control Panel by resetting the administrative password without prior authentication. It generates an HTML form to submit the new credentials to the vulnerable CGI script.
Description
PowerScripts PlusMail CGI program allows remote attackers to execute commands via a password file with improper permissions.
Exploits (3)
This exploit demonstrates an authentication bypass vulnerability in PowerScripts PlusMail Web Control Panel by resetting the administrative password without prior authentication. It generates an HTML form to submit the new credentials to the vulnerable CGI script.
This exploit demonstrates an authentication bypass vulnerability in PowerScripts PlusMail Web Control Panel by sending a crafted POST request to reset the administrative password without prior authentication. It then sets up a local listener to serve a modified HTML form for further interaction.
This exploit demonstrates an authentication bypass vulnerability in PowerScripts PlusMail Web Control Panel by sending a crafted HTTP GET request to create a new administrative account without prior authentication. The exploit leverages the lack of authentication checks in the plusmail CGI script.