CVE-2008-1327
gallarific - Unauthenticated Task Manipulation via users.php and index.php
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2008-1327. PoCs published by ZoRLu.
AI-analyzed exploit summary The provided text describes multiple vulnerabilities in Gallarific, including XSS and authentication bypass issues. It outlines specific URLs that can be exploited to add categories, edit users, and add new users without proper authentication.
Description
Gallarific does not require authentication for (1) users.php and (2) index.php, which allows remote attackers to add and edit tasks via a direct request. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Exploits (1)
The provided text describes multiple vulnerabilities in Gallarific, including XSS and authentication bypass issues. It outlines specific URLs that can be exploited to add categories, edit users, and add new users without proper authentication.