PT-2007-4282 · Pheap · Pheap

Silentz · Published 2007-06-01 · Updated 2017-10-11 · CVE-2007-2985

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: Pheap version 2.0

Description: The issue allows remote attackers to bypass authentication by setting a pheap login cookie value to the administrator's username. This can be used to obtain sensitive information, including the administrator password, via "settings.php" or to upload and execute arbitrary PHP code via an "update doc" action in "edit.php".

Recommendations: For Pheap version 2.0, as a temporary workaround, consider restricting access to "settings.php" and "edit.php" to minimize the risk of exploitation. Avoid using the pheap login cookie until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2007-2985

Affected Products

Pheap

References · 5

• 🔥 https://exploit-db.com/exploits/4006 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2007-2985 · Security Note
• http://secunia.com/advisories/25460 · Vendor Advisory
• http://osvdb.org/36737 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/34592 · Note