CVE-2008-6118

This exploit leverages an authentication bypass vulnerability in Goople CMS 1.7 by setting a 'loggedin' cookie via JavaScript, allowing unauthorized file uploads. The attacker can then upload malicious files (e.g., PHP/HTML) to achieve remote code execution.

The exploit describes an arbitrary file creation vulnerability in Goople CMS 1.7 via the Notepad feature, accessible after authentication. It also includes a method to bypass login using JavaScript cookie manipulation.