CVE-2007-2985
Pheap 2.0 - Unauthenticated Authentication Bypass via pheap_login Cookie
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2007-2985. PoCs published by Silentz.
AI-analyzed exploit summary This exploit leverages an authentication bypass vulnerability in Pheap 2.0 by manipulating the 'pheap_login' cookie to impersonate an admin user. It can disclose credentials or achieve remote code execution by injecting a PHP shell into the target's index.php file.
Description
Pheap 2.0 allows remote attackers to bypass authentication by setting a pheap_login cookie value to the administrator's username, which can be used to (1) obtain sensitive information, including the administrator password, via settings.php or (2) upload and execute arbitrary PHP code via an update_doc action in edit.php.
Exploits (1)
This exploit leverages an authentication bypass vulnerability in Pheap 2.0 by manipulating the 'pheap_login' cookie to impersonate an admin user. It can disclose credentials or achieve remote code execution by injecting a PHP shell into the target's index.php file.