CVE-2007-3974
JBlog 1.0 - Unauthenticated Arbitrary Account Creation via admin/ajoutaut.php
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2007-3974. PoCs published by s4mi.
AI-analyzed exploit summary This exploit demonstrates multiple vulnerabilities in JBlog 1.0, including XSS, cookie manipulation, and privilege escalation. It allows an attacker to create an admin account, manipulate cookies, and execute arbitrary JavaScript.
Description
admin/ajoutaut.php in JBlog 1.0 does not require authentication, which allows remote attackers to create arbitrary accounts via modified mot and droit parameters.
Exploits (2)
This exploit demonstrates multiple vulnerabilities in JBlog 1.0, including XSS, cookie manipulation, and privilege escalation. It allows an attacker to create an admin account, manipulate cookies, and execute arbitrary JavaScript.
This Perl script exploits a remote SQL injection vulnerability in JBlog 1.0 by injecting a UNION-based payload into the 'id' parameter, extracting admin credentials from the 'auteur' table. It sends a crafted HTTP GET request to retrieve and display the username and password hash.