CVE-2005-1787
phpstat 1.5 - Unauthenticated Authentication Bypass via $check Variable
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2005-1787. PoCs published by Nikyt0x, mh_p0rtal, Alpha_Programmer.
AI-analyzed exploit summary This exploit bypasses authentication in PHP Stat by sending a crafted HTTP request to the setup.php script, allowing an attacker to change the admin username and password to predefined values. It leverages a vulnerability in the setup.php script to update credentials without proper authentication.
Description
setup.php in phpStat 1.5 allows remote attackers to bypass authentication and gain administrator privileges by setting the $check variable.
Exploits (3)
This exploit bypasses authentication in PHP Stat by sending a crafted HTTP request to the setup.php script, allowing an attacker to change the admin username and password to predefined values. It leverages a vulnerability in the setup.php script to update credentials without proper authentication.
This exploit demonstrates an authentication bypass vulnerability in PHP Stat by submitting a crafted form to setup.php with predefined admin credentials. It bypasses the authentication mechanism by directly setting the 'check' parameter to 'yes'.
This exploit bypasses authentication in PHPStat 1.5 by sending a crafted HTTP GET request to setup.php, allowing an attacker to set a new admin password without prior authentication.