CVE-2007-2985 Pheap 2.0 allows remote attackers to bypass authentication by setting a pheap_login cookie value to the administrator's username, which can be used to (1) obtain sensitive information, including the a...
HighCVSS 10.0
EPSS 4.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Pheap 2.0 allows remote attackers to bypass authentication by setting a pheap_login cookie value to the administrator's username, which can be used to (1) obtain sensitive information, including the administrator password, via settings.php or (2) upload and execute arbitrary PHP code via an update_doc action in edit.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| pheap | = 2.0 | No fix listed |
References
- 36737 vdb-entry
- 25460 third-party-advisory vendor-advisory
- pheap-edit-code-execution(34592) vdb-entry
- 4006 exploit