Host Directory PRO - Cookie Security Bypass

Author: Crackers_Child
type: webapps
platform: php
port: 
date_added: 2008-04-20  
date_updated: 2014-02-16  
verified: 1  
codes:   
tags:   
aliases:   
screenshot_url:   
application_url:   

raw file: 31676.txt  
source: https://www.securityfocus.com/bid/28863/info

Host Directory PRO is prone to a security-bypass vulnerability because it fails to properly validate user credentials before performing certain actions.

Exploiting this issue may allow an attacker to bypass certain security restrictions and gain administrative access to the application. This will compromise the application and may aid in further attacks.

javascript:document.cookie = "adm=1 path=/;";