CVE-2005-2777

Looking Glass 20040427 - Remote Command Execution via DNS Lookup Query Field

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2005-2777. PoCs published by rgod.

AI-analyzed exploit summary This PHP script exploits CVE-2005-2777 in Looking Glass v20040427 by injecting arbitrary commands via the '|' character in a URI parameter, leading to remote command execution. The exploit sends a crafted POST request to the vulnerable endpoint and displays the output.

Description

Looking Glass 20040427 allows remote attackers to execute arbitrary commands via shell metacharacters in the DNS lookup query field.

Exploits (1)

exploitdb WORKING POC VERIFIED

by rgod · phpwebappsphp

https://www.exploit-db.com/exploits/26203

View Code ZIP pw:eip

This PHP script exploits CVE-2005-2777 in Looking Glass v20040427 by injecting arbitrary commands via the '|' character in a URI parameter, leading to remote command execution. The exploit sends a crafted POST request to the vulnerable endpoint and displays the output.

Classification

Working Poc 95%

Attack Type

Rce

Complexity

Trivial

Reliability

Reliable

Target: Looking Glass v20040427

No auth needed

Prerequisites: Network access to the vulnerable Looking Glass instance · PHP environment to run the exploit script

MITRE ATT&CK