CVE-2008-6293
Acc Real Estate 4.0 - Unauthenticated Authentication Bypass via username_cookie
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2008-6293. PoCs published by Hakxer.
AI-analyzed exploit summary This exploit demonstrates an insecure cookie handling vulnerability in Acc Real Estate v4.0, allowing an attacker to bypass authentication by setting the 'username_cookie' to 'admin' via JavaScript. The PoC is functional and directly exploits the vulnerability by manipulating the cookie value.
Description
admin/Index.php in Acc Real Estate 4.0 allows remote attackers to bypass authentication and gain administrative access by setting the username_cookie to "admin."
Exploits (3)
This exploit demonstrates an insecure cookie handling vulnerability in Acc Real Estate v4.0, allowing an attacker to bypass authentication by setting the 'username_cookie' to 'admin' via JavaScript. The PoC is functional and directly exploits the vulnerability by manipulating the cookie value.
This exploit demonstrates an insecure cookie handling vulnerability in AccStatistics v1.1, allowing an attacker to bypass authentication by setting the 'username_cookie' to 'admin' via JavaScript. The PoC is a simple one-liner that manipulates the cookie to gain admin access.
This exploit demonstrates an insecure cookie handling vulnerability in Acc Autos v4.0, allowing an attacker to bypass authentication by setting specific cookie values via JavaScript.