CVE-2008-6292
Acc Autos 4.0 - Unauthenticated Authentication Bypass via Cookie Manipulation
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2008-6292. PoCs published by x0r.
AI-analyzed exploit summary This exploit demonstrates an insecure cookie handling vulnerability in Acc Autos v4.0, allowing an attacker to bypass authentication by setting specific cookie values via JavaScript. The exploit is trivial and reliable, requiring no prior authentication.
Description
Acc Autos 4.0 allows remote attackers to bypass authentication and gain administrative access by setting the (1) username_cookie to "admin," (2) right_cookie to "1," and (3) id_cookie to "1."
Exploits (3)
This exploit demonstrates an insecure cookie handling vulnerability in Acc Autos v4.0, allowing an attacker to bypass authentication by setting specific cookie values via JavaScript. The exploit is trivial and reliable, requiring no prior authentication.
The exploit demonstrates an insecure cookie handling vulnerability in AccStatistics v1.1, allowing an attacker to set the 'username_cookie' to 'admin' via JavaScript, bypassing authentication. The PoC is functional and directly exploits the vulnerability by manipulating the cookie value.
This exploit demonstrates an insecure cookie handling vulnerability in Acc Real Estate v4.0, allowing an attacker to bypass authentication by setting the 'username_cookie' to 'admin' via JavaScript. The PoC is functional and directly exploits the flaw by manipulating the cookie value.