Summary
This host is installed with PHPads
and is prone to Authentication Bypass vulnerabilities.
Impact
Successful exploitation allows to bypass
the authentication mechanism by creating the cookies 'user' and 'pass' and assigning them the corresponding values taken from the 'ads.dat' file.
Impact Level: Application
Solution
No solution or patch is available
as of 20th February, 2015. Information regarding this issue will updated once the solution details are available. For updates refer to http://www.opensource.be/openx
Insight
The flaws is due to 'ads.dat' file
which is in web root.
Affected
PHPads version 2.0
Detection
Send a crafted data via HTTP GET
request and check whether it is able to read 'ads.dat' file or not.
References
Updated on 2015-03-25
