Os-Commerce CSRF Vulnerability (Add Admin)

Exploit for php platform in category web applications Exploit Title: Os-Commerce CSRF Vulnerability Add Admin Google Dork: Powered by Oscommerce // allinurl:productinfo.php?cPath Date: 01/26/2011 Author:Saidinh0 Software Link:http://oscommerce.com/ Home: http://english7.info Version: v 3.1 Tested...

OS Commerce Bypass / Command Execution

OS Commerce authentication bypass Description: Accessing administration pages should give a login screen to unauthenticated users, however instead, data is displayed, and administrative commands can be executed. Apparently any page in the admin directory can be accessed in this way including file...

OS Commerce 2.2r2 - Authentication Bypass

OS Commerce 2.2r2 - Authentication Bypass When this hole was brought to our attention, we were amazed to find that it seems nobody has caught it yet!! There is a page in the admin that can be access without login AND can pass parameters!! /admin/mail.php/login.php /admin/mail.php/login.php?fooled...

OS Commerce 2.2r2 authentication bypass

No description provided by source. When this hole was brought to our attention, we were amazed to find that it seems nobody has caught it yet!! There is a page in the admin that can be access without login AND can pass parameters!! /admin/mail.php/login.php /admin/mail.php/login.php?fooled...

OS Commerce 2.2r2 authentication bypass

Exploit for unknown platform in category web applications ======================================= OS Commerce 2.2r2 authentication bypass ======================================= When this hole was brought to our attention, we were amazed to find that it seems nobody has caught it yet!! There is a...

OS Commerce 2.2r2 - Authentication Bypass

When this hole was brought to our attention, we were amazed to find that it seems nobody has caught it yet!! There is a page in the admin that can be access without login AND can pass parameters!! /admin/mail.php/login.php /admin/mail.php/login.php?fooled...