CVE-2008-6118
Goople CMS 1.7 - Unauthenticated Authentication Bypass via Loggedin Cookie
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2008-6118. PoCs published by x0r, BeyazKurt.
AI-analyzed exploit summary The exploit describes an arbitrary file creation vulnerability in Goople CMS 1.7 via the Notepad feature, accessible after authentication. It also includes a method to bypass login using JavaScript cookie manipulation.
Description
win/content/upload.php in Goople CMS 1.7 allows remote attackers to bypass authentication and gain administrative access by setting the loggedin cookie to 1.
Exploits (2)
The exploit describes an arbitrary file creation vulnerability in Goople CMS 1.7 via the Notepad feature, accessible after authentication. It also includes a method to bypass login using JavaScript cookie manipulation.
This exploit leverages an authentication bypass vulnerability in Goople CMS 1.7 by setting a 'loggedin' cookie via JavaScript, allowing unauthorized file uploads. The attacker can then upload malicious files (e.g., PHP/HTML) to achieve remote code execution.