CVE-2005-0305
Siteman <= 1.1.10 - CRLF Injection via Users.php Line Parameter
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2005-0305. PoCs published by amironline452, Noam Rathaus.
AI-analyzed exploit summary This exploit demonstrates a privilege escalation vulnerability in Siteman 1.1.10 and prior by injecting malicious data into the user database file via a URI parameter. The attacker can corrupt the database to gain administrative privileges (Member Level 5).
Description
CRLF injection vulnerability in users.php in Siteman 1.1.10 and earlier allows remote attackers to add arbitrary users and gain privileges via the line parameter in a docreate operation.
Exploits (2)
This exploit demonstrates a privilege escalation vulnerability in Siteman 1.1.10 and prior by injecting malicious data into the user database file via a URI parameter. The attacker can corrupt the database to gain administrative privileges (Member Level 5).
This exploit leverages insufficient input sanitization in Siteman's user database file handling to inject malicious data via a URI parameter, allowing privilege escalation to administrative access. The PoC sends a crafted POST request to corrupt the user database file.