Exploitation Summary
EIP tracks 1 public exploit for CVE-2005-1708. PoCs published by Oliver Karow.
AI-analyzed exploit summary This exploit demonstrates a privilege escalation vulnerability in Blue Coat Reporter by manipulating a user addition form to create an administrator account. It uses a crafted POST request with valid session credentials to exploit improper authentication checks.
Description
templates.admin.users.user_form_processing in Blue Coat Reporter before 7.1.2 allows authenticated users to gain administrator privileges via an HTTP POST that sets volatile.user.administrator to true.
Exploits (1)
This exploit demonstrates a privilege escalation vulnerability in Blue Coat Reporter by manipulating a user addition form to create an administrator account. It uses a crafted POST request with valid session credentials to exploit improper authentication checks.