EDB-3725
functionalChatness 2.5.3 - '/options.php/save.php' Remote Code Execution
view exploit source exploit_dbverifiedtype webappsauthor Gammarayspublished 2007-04-12catalog exploit_db
01
exploited CVEs (3)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2007-2147US | high10.0OT high | Exploit | ||
admin/options.php in Stephen Craton (aka WiredPHP) Chatness 2.5.3 and earlier does not check for administrative credentials, which allows remote attackers to read and modify the cl… | ||||
| CVE-2007-2148US | medium6.5 | Exploit | ||
Direct static code injection vulnerability in admin/save.php in Stephen Craton (aka WiredPHP) Chatness 2.5.3 and earlier allows remote authenticated administrators to inject PHP co… | ||||
| CVE-2007-2149US | high10.0OT high | Exploit | ||
Stephen Craton (aka WiredPHP) Chatness 2.5.3 and earlier stores usernames and unencrypted passwords in (1) classes/vars.php and (2) classes/varstuff.php, and recommends 0666 or 077… | ||||
scry
Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.
Free scan