RE: <XSS> [Help Needed] 12-05-2012, 03:39 AM
#2
Um, you use firebug and you modify your current cookie to change them to the one that is hopefully the admin's after he has logged in therefore, giving you access to AdminCP.
If the admin is not logged in receiving your email (weird), then you will still get a cookie, but will not give you access, just make you look like him accessing the page.
If the admin is not logged in receiving your email (weird), then you will still get a cookie, but will not give you access, just make you look like him accessing the page.


![[+]](https://sinister.ly/images/modern/collapse_collapsed.png)