CVE-2007-2985 json
Pheap 2.0 allows remote attackers to bypass authentication by setting a pheap_login cookie value to the administrator's username, which can…
published 2007-06-01 19 y ago modified 2026-06-16 4 mo ago also EUVD-2007-2977
- cvss
- 10.0
- version 2.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 4.2%
- EPSS 4.2% chance of exploitation in 30 days, percentile 90%
- public exploits
- 1
- Exploit-DB
Summary
Pheap 2.0 allows remote attackers to bypass authentication by setting a pheap_login cookie value to the administrator's username, which can be used to (1) obtain sensitive information, including the administrator password, via settings.php or (2) upload and execute arbitrary PHP code via an update_doc action in edit.php.
Timeline
- First public exploit (EDB-4006)
- Published
Exploit prediction
4.17% chance of exploitation in the next 30 days, higher than 90% of all scored CVEs (FIRST EPSS, 2026-11-08).
Exploits and checks
- EDB-4006 Pheap 2.0 - Authentication Bypass / Remote Code Execution webapps, 2007-05-29
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 2.0 | 10.0 | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Classification
- Weakness
-
- CWE-264 Permissions, Privileges, and Access Controls
References
-
exploit-db.com
/exploits/4006
exploit
-
secunia.com
/advisories/25460
third-party-advisory, vendor-advisory
-
osvdb.org
/36737
vdb-entry
-
exchange.xforce.ibmcloud.com
/vulnerabilities/34592
vdb-entry
Sources
- CVE List CVE-2007-2985
- NVD CVE-2007-2985
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.