CVE-2008-5873

Yerba SACphp < 6.3 - Unauthenticated Authentication Bypass via galleta[sesion] Cookie

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2008-5873. PoCs published by StAkeR.

AI-analyzed exploit summary This is a writeup detailing multiple vulnerabilities in Yerba SACphp <= 6.3, including admin login bypass, privilege escalation, arbitrary database download, and arbitrary admin addition via crafted SID parameters. No executable exploit code is provided.

Description

Yerba SACphp 6.3 and earlier allows remote attackers to bypass authentication and gain administrative access via a galleta[sesion] cookie that has a value beginning with 1:1: followed by a username.

Exploits (1)

exploitdb WRITEUP VERIFIED

by StAkeR · textwebappsphp

https://www.exploit-db.com/exploits/6691

View Code ZIP pw:eip

This is a writeup detailing multiple vulnerabilities in Yerba SACphp <= 6.3, including admin login bypass, privilege escalation, arbitrary database download, and arbitrary admin addition via crafted SID parameters. No executable exploit code is provided.

Classification

Writeup 90%

Attack Type

Auth Bypass | Info Leak | Other

Complexity

Trivial

Reliability

Theoretical

Target: Yerba SACphp <= 6.3

No auth needed

Prerequisites: access to the target application

MITRE ATT&CK