Visit our newest sister site!
Hundreds of free aircraft flight manuals
Civilian • Historical • Military • Declassified • FREE!


TUCoPS :: Web :: Blogs :: tb11826.htm

PHPBlogger cookie privilege escalation



PHPBlogger cookie privilege escalation
PHPBlogger cookie privilege escalation



PHPBlogger is a simple tool to help the creation of web blogs...

Encrypted admin password and other preferences are stored on /data/pref.db

You can find lots of them exposed with google
search: pref password= filetype:db
=]

--------------------------------------------

The admin panel is acessible once you have a cookie named "key" with the encrypted password


So, its possible to administrate remote blogs just by searching for a exposed pref.db and creating a cookie for the page with the encrypted password

for more detailes (pt-BR)
http://forcehacker.com/forum/viewtopic.php?t=2352 

by darthballs


TUCoPS is optimized to look best in Firefox® on a widescreen monitor (1440x900 or better).
Site design & layout copyright © 1986-2014 AOH