PT-2005-2755 · Phpstat · Phpstat

Published 2005-05-27 · Updated 2016-11-25 · CVE-2005-1787

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions phpStat version 1.5

Description The issue allows remote attackers to bypass authentication and gain administrator privileges. This is achieved by setting the check variable in the setup.php file.

Recommendations For phpStat version 1.5, consider restricting access to the setup.php file until a patch is available. As a temporary workaround, avoid using the setup.php file or restrict the ability to set the check variable to prevent exploitation.

Exploit

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2005-1787

Affected Products

Phpstat

References · 9

• 🔥 https://exploit-db.com/exploits/1018 · Exploit
• 🔥 http://soulblack.com.ar/repo/tools/sbphpstatpoc.txt · Exploit
• 🔥 https://exploit-db.com/exploits/1017 · Exploit
• 🔥 https://exploit-db.com/exploits/1016 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2005-1787 · Security Note
• http://soulblack.com.ar/repo/papers/advisory/PhpStat_advisory.txt · Note
• http://secunia.com/advisories/15516 · Note
• http://marc.info/?l=bugtraq&m=111721290726958&w=2 · Note
• http://securitytracker.com/id?1014064 · Note