CVE-2007-2822
TutorialCMS <= 1.01 - Authentication Bypass via loggedIn and activated Parameters
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2007-2822. PoCs published by Silentz.
AI-analyzed exploit summary This is a writeup describing an authentication bypass vulnerability in TutorialCMS <= 1.01. The exploit leverages undefined variables $loggedIn and $activated when register_globals is enabled, allowing unauthorized access to userCP.php and other files.
Description
TutorialCMS 1.01 and earlier, when register_globals is enabled, allows remote attackers to bypass authentication via the (1) loggedIn and (2) activated parameters to (a) login.php, (b) headerLinks.php, (c) submit1.php, (d) myFav.php, and (e) userCP.php.
Exploits (1)
This is a writeup describing an authentication bypass vulnerability in TutorialCMS <= 1.01. The exploit leverages undefined variables $loggedIn and $activated when register_globals is enabled, allowing unauthorized access to userCP.php and other files.