PT-2005-2755 · Phpstat · Phpstat

Publicado 2005-05-27 · Atualizado 2016-11-25 · CVE-2005-1787

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions phpStat version 1.5

Description The issue allows remote attackers to bypass authentication and gain administrator privileges. This is achieved by setting the check variable in the setup.php file.

Recommendations For phpStat version 1.5, consider restricting access to the setup.php file until a patch is available. As a temporary workaround, avoid using the setup.php file or restrict the ability to set the check variable to prevent exploitation.

Exploit

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2005-1787

Produtos afetados

Phpstat

Referências · 9

• 🔥 https://exploit-db.com/exploits/1018 · Exploit
• 🔥 http://soulblack.com.ar/repo/tools/sbphpstatpoc.txt · Exploit
• 🔥 https://exploit-db.com/exploits/1017 · Exploit
• 🔥 https://exploit-db.com/exploits/1016 · Exploit
• http://soulblack.com.ar/repo/papers/advisory/PhpStat_advisory.txt · Nota
• http://secunia.com/advisories/15516 · Nota
• http://marc.info/?l=bugtraq&m=111721290726958&w=2 · Nota
• http://securitytracker.com/id?1014064 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-1787 · Nota de Segurança