Exploitation Summary
EIP tracks 1 public exploit for CVE-2017-17097. PoCs published by Noman Riffat.
AI-analyzed exploit summary The writeup describes two vulnerabilities in GPS-SERVER.NET SAAS CMS <=3.0: a remote code injection via log file manipulation and a password reset vulnerability due to predictable passwords. The code injection requires admin interaction to execute, while the password reset can be exploited with timing synchronization.
Description
gps-server.net GPS Tracking Software (self hosted) 2.x has a password reset procedure that immediately resets passwords upon an unauthenticated request, and then sends e-mail with a predictable (date-based) password to the admin, which makes it easier for remote attackers to obtain access by predicting this new password. This is related to the use of gmdate for password creation in fn_connect.php.
Exploits (1)
The writeup describes two vulnerabilities in GPS-SERVER.NET SAAS CMS <=3.0: a remote code injection via log file manipulation and a password reset vulnerability due to predictable passwords. The code injection requires admin interaction to execute, while the password reset can be exploited with timing synchronization.
References (3)
Scores
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H