CVE-2008-1727

KnowledgeQuest 2.5 and 2.6 - Unauthenticated Arbitrary Admin Account Creation via admincheck.php

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2008-1727. PoCs published by t0pP8uZz.

AI-analyzed exploit summary This exploit targets KnowledgeQuest 2.5 by sending a crafted POST request to admincheck.php to add an arbitrary admin account. It leverages an authentication bypass vulnerability to create a new admin user with specified credentials.

Description

KnowledgeQuest 2.5 and 2.6 does not require authentication for access to admincheck.php, which allows remote attackers to create arbitrary admin accounts.

Exploits (1)

exploitdb WORKING POC VERIFIED
by t0pP8uZz · perlwebappsphp
https://www.exploit-db.com/exploits/5418

This exploit targets KnowledgeQuest 2.5 by sending a crafted POST request to admincheck.php to add an arbitrary admin account. It leverages an authentication bypass vulnerability to create a new admin user with specified credentials.

Classification
Working Poc 95%
Attack Type
Auth Bypass
Complexity
Trivial
Reliability
Reliable
Target: KnowledgeQuest 2.5
No auth needed
Prerequisites: Network access to the target application · Knowledge of the target URL
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (4)

Core 4
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://www.osvdb.org/44257
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/41747
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/29716
Exploit, Third Party Advisory exploit x_refsource_exploit-db
https://www.exploit-db.com/exploits/5418

Scores

EPSS 0.0685
EPSS Percentile 93.2%

Details

CWE
CWE-287
Status published
Products (2)
myknowledgequest/knowledgequest 2.5
myknowledgequest/knowledgequest 2.6
Published Apr 11, 2008
Tracked Since Feb 18, 2026