Exploitation Summary
EIP tracks 3 public exploits for CVE-2005-0614. PoCs published by str0ke, Kutas, Ali7.
AI-analyzed exploit summary This exploit modifies the Firefox cookies.txt file to inject a serialized PHP object that bypasses authentication in phpBB, granting anonymous users administrator privileges. It replaces a specific cookie value with a crafted payload.
Description
sessions.php in phpBB 2.0.12 and earlier allows remote attackers to gain administrator privileges via the autologinid value in a cookie.
Exploits (3)
This exploit modifies the Firefox cookies.txt file to inject a serialized PHP object that bypasses authentication in phpBB, granting anonymous users administrator privileges. It replaces a specific cookie value with a crafted payload.
This exploit leverages a session autologin vulnerability in phpBB <=2.0.12 to escalate a registered user's privileges to administrator by manipulating the 'autologinid' cookie. It automates the process of fetching a user ID and promoting the user to admin status.
This exploit demonstrates an authentication bypass in phpBB 2.0.12 by manipulating session data stored in Firefox cookies. The attacker modifies the serialized cookie data to elevate privileges to an admin user (userid 2).