A-Shop versions 0.70 and below suffer from an arbitrary remote file deletion vulnerability.
69c701335c81bc57d018ba7018dbba52d2c1c453b9cfa03fb52b2312fa5d3d3dA-shop <=0.70 Multiple vulnerabilities
Found Bug: Timq
site:http://private-node.net
email:timq@hushmail.com
Vendor:http://www.rammdev.com/ashop/
PoC:
http://site.com/admin/filebrowser.asp?folder=products&delfiles=[del any file on server]
It is possible to delete not only the files in the folders listed,
but also ouside its directory.
Also possible sql injections in other areas.
© 2022 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed