CVE-2006-0312

aoblogger 2.3 - Unauthenticated Blog Entry Creation via uza Parameter

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2006-0312. PoCs published by Aliaksandr Hartsuyeu.

AI-analyzed exploit summary The provided text describes an input-validation vulnerability in AOblogger 2.3, allowing unauthorized entry creation via a crafted POST request. It includes a basic HTML form example demonstrating the exploit but lacks executable code.

Description

create.php in aoblogger 2.3 allows remote attackers to bypass authentication and create new blog entries by setting the uza parameter to 1.

Exploits (1)

exploitdb WRITEUP VERIFIED

by Aliaksandr Hartsuyeu · textwebappsphp

https://www.exploit-db.com/exploits/27106

View Code ZIP pw:eip

The provided text describes an input-validation vulnerability in AOblogger 2.3, allowing unauthorized entry creation via a crafted POST request. It includes a basic HTML form example demonstrating the exploit but lacks executable code.

Classification

Writeup 90%

Attack Type

Auth Bypass

Complexity

Trivial

Reliability

Theoretical

Target: AOblogger 2.3

No auth needed

Prerequisites: Access to the target application's create.php endpoint

MITRE ATT&CK