Exploitation Summary
EIP tracks 1 public exploit for CVE-2007-4419. PoCs published by imei.
AI-analyzed exploit summary This exploit leverages an authentication bypass vulnerability in Olate Download by providing a crafted cookie value. The cookie bypasses authentication and grants administrative access to the application.
Description
Admin.php in Olate Download (od) 3.4.1 uses an MD5 hash of the admin username, user id, and group id, to compose the OD3_AutoLogin authentication cookie, which makes it easier for remote attackers to guess the cookie and access the Admin area.
Exploits (1)
This exploit leverages an authentication bypass vulnerability in Olate Download by providing a crafted cookie value. The cookie bypasses authentication and grants administrative access to the application.