Description
index.php in Ryan Haudenschilt Family Connections (FCMS) before 0.9 allows remote attackers to access an arbitrary account by placing the account's name in the value of an fcms_login_id cookie. NOTE: this can be leveraged for code execution via a POST with PHP code in the content parameter.
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.
Exploit-DB 1
- Haudenschilt Family Connections 0.8 - 'index.php' Authentication Bypass EDB-30488 · webapps · Aug 11, 2007 · verified
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
References
- 3009 third-party-advisory
- 20070813 Re: FCMS (Family Connections) <= 0.1.1 Remote Command Execution Exploit // www.MefistoLabs.com mailing-list
- 20070811 FCMS (Family Connections) <= 0.1.1 Remote Command Execution Exploit // www.MefistoLabs.com mailing-list
- 25276 vdb-entry
- 26421 third-party-advisory
- family-fcmsloginid-security-bypass(35966) vdb-entry
- 20070814 uncertain: FCMS (Family Connections) code execution mailing-list
- http://sourceforge.net/tracker/index.php?func=detail&aid=1778696&group_id=189733&atid=930513
- 39534 vdb-entry
- 20070823 vendor ACK for CVE-2007-4338 (Familr Connections) mailing-list