Exploitation Summary
EIP tracks 1 public exploit for CVE-2007-4338. PoCs published by ilker Kandemir.
AI-analyzed exploit summary This exploit leverages an authentication bypass vulnerability in Haudenschilt Family Connections to upload a malicious PHP shell (ilker.php) and execute arbitrary commands. It abuses improper session handling via cookie manipulation to gain unauthorized access.
Description
index.php in Ryan Haudenschilt Family Connections (FCMS) before 0.9 allows remote attackers to access an arbitrary account by placing the account's name in the value of an fcms_login_id cookie. NOTE: this can be leveraged for code execution via a POST with PHP code in the content parameter.
Exploits (1)
This exploit leverages an authentication bypass vulnerability in Haudenschilt Family Connections to upload a malicious PHP shell (ilker.php) and execute arbitrary commands. It abuses improper session handling via cookie manipulation to gain unauthorized access.