CVE-2008-6294
Acc Statistics 1.1 - Unauthenticated Authentication Bypass via username_cookie
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2008-6294. PoCs published by Hakxer, x0r.
AI-analyzed exploit summary This exploit demonstrates an insecure cookie handling vulnerability in AccStatistics v1.1, allowing an attacker to set the 'username_cookie' to 'admin' via JavaScript, bypassing authentication.
Description
admin/Index.php in Acc Statistics 1.1 allows remote attackers to bypass authentication and gain administrative access by setting the username_cookie cookie to "admin."
Exploits (3)
This exploit demonstrates an insecure cookie handling vulnerability in AccStatistics v1.1, allowing an attacker to set the 'username_cookie' to 'admin' via JavaScript, bypassing authentication.
This exploit demonstrates an insecure cookie handling vulnerability in Acc Real Estate v4.0, allowing an attacker to bypass authentication by setting the 'username_cookie' to 'admin' via JavaScript. The PoC is functional and directly exploits the vulnerability by manipulating the cookie value.
This exploit demonstrates an insecure cookie handling vulnerability in Acc Autos v4.0, allowing an attacker to bypass authentication by setting specific cookie values via JavaScript. The exploit is trivial and reliable, requiring no prior authentication.