CVE-2007-5113

Google Urchin < 5.7.03 - Authentication Bypass via Modified Query Parameters

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2007-5113. PoCs published by MustLive.

AI-analyzed exploit summary The provided text describes an authentication-bypass vulnerability in Google Urchin 5.7.03, where an attacker can gain administrative access via a crafted URL. However, it is noted that this may be a documented feature rather than a vulnerability.

Description

report.cgi in Google Urchin allows remote attackers to bypass authentication and obtain sensitive information (web server logs) via certain modified query parameters, as demonstrated using the profile, rid, prefs, n, vid, bd, ed, dt, and gtype parameters, a different vulnerability than CVE-2007-5112.

Exploits (1)

exploitdb WRITEUP VERIFIED

by MustLive · textwebappscgi

https://www.exploit-db.com/exploits/30661

View Code ZIP pw:eip

The provided text describes an authentication-bypass vulnerability in Google Urchin 5.7.03, where an attacker can gain administrative access via a crafted URL. However, it is noted that this may be a documented feature rather than a vulnerability.

Classification

Writeup 80%

Attack Type

Auth Bypass

Complexity

Trivial

Reliability

Theoretical

Target: Google Urchin 5.7.03

No auth needed

Prerequisites: Access to the target application's URL

MITRE ATT&CK