CVE-2008-1727

KnowledgeQuest <2.7 - Auth Bypass

Title source: llm

Description

KnowledgeQuest 2.5 and 2.6 does not require authentication for access to admincheck.php, which allows remote attackers to create arbitrary admin accounts.

Exploits (1)

exploitdb WORKING POC VERIFIED

by t0pP8uZz · perlwebappsphp

https://www.exploit-db.com/exploits/5418

View Code ZIP pw:eip

References (4)

[Third Party Advisory, VDB Entry] http://www.osvdb.org/44257

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/41747

[Vendor Advisory] http://secunia.com/advisories/29716

[Exploit, Third Party Advisory] https://www.exploit-db.com/exploits/5418

Scores

EPSS 0.0358

EPSS Percentile 87.8%

Details

CWE

CWE-287

Status published

Products (2)

myknowledgequest/knowledgequest 2.5

myknowledgequest/knowledgequest 2.6

Published Apr 11, 2008

Tracked Since Feb 18, 2026