ajaypal.com

A mohali based company http://www.cyberix.in/ has an otherwise good Internet Management Software Product by the name Cyberix, is vulnerable to a very simple authentication bypass vulnerability (rather it is more of a software design issue).

Cyberix IMS when authenticating a user using, the web login via a popup window, sends the MD5 hash of the users password in the GET request. As all URLs, along with the GET variables and their values, are saved in the browser's history, thus any user who has access to the system, used by a previous user, can simply check the browser history and click on the login URL to login as the other user, without providing any password. Defeating the purpose of an IMS where different users may have different access levels as promised by Cyberix IMS.

These days I am having too much fun with XSS. It is no good wishing happy holi by manipulating other peoples websites, even though it is harmless. You never know when you will come across some crazy hippocrat who believes that its website has been defaced and then tries to grab the poor fun loving XSSer by neck.

Note to Self
Keep out of trouble and stop XSSing even if the other guy does not fix the website. Hey did I mention it is possible to move Lambi Assembly Constituency in Punjab to Haryana, now don't ask me how. A number of other funny permutations are also possible. Guess what am I talking about, or wait till these people say something...

The fun of online ticket booking. No going to agents and listening to their non-sense, no asking questions, just sit in front of your dear computer fire the browser, select Destination, make payment using the Credit Card and lo and behold you have the tickets.

Well not that simple, specially when you are using a computer based on free software (free as in freedom). I use GNU/ Linux, Mozilla Firefox, I dont trust Windows for online transactions [*].

These days Full Disclosure mailing list is being dominated by XSS vulnerabilities. It is time I should put up my contribution too, for an XSS vulnerability I have known for around 7-8 months.
The site in question ptu.ac.in is of Punjab Technical University, Jalandhar. The URL http://ptujal.org used to refers to the same site.