Exploitation Summary
EIP tracks 2 public exploits for CVE-2006-0944. PoCs published by Dj7xpl, KingOfSka.
AI-analyzed exploit summary This exploit demonstrates a Local File Inclusion (LFI) vulnerability and an authentication bypass via cookie manipulation in Archangel Weblog version 0.90.02. The LFI allows reading arbitrary files by appending a null byte, while the auth bypass involves setting a cookie to gain admin access.
Description
Archangel Weblog 0.90.02 allows remote attackers to bypass authentication by setting the ba_admin cookie to 1.
Exploits (2)
This exploit demonstrates a Local File Inclusion (LFI) vulnerability and an authentication bypass via cookie manipulation in Archangel Weblog version 0.90.02. The LFI allows reading arbitrary files by appending a null byte, while the auth bypass involves setting a cookie to gain admin access.
This exploit demonstrates an authentication bypass vulnerability in Archangel Weblog by setting a specific cookie value (`ba_admin=1`) to gain administrative access without proper credentials.