osCommerce - file_manager.php Upload RCE (CVE-2009-20006)

Exploits CVE-2009-20006 by writing PHP via admin/filemanager.php/login.php?action=save. !/usr/bin/env python3 -- coding: utf-8 -- """osCommerce filemanager.php upload RCE CVE-2009-20006.""" from random import randint from kittysploit import from lib.protocols.http.httpclient import Httpclient fro...

CVE-2009-20006: Unrestricted Upload of File with Dangerous Type

osCommerce versions up to and including 2.2 RC2a contain a vulnerability in its administrative file manager utility admin/filemanager.php. The interface allows file uploads and edits without sufficient input validation or access control. An unauthenticated attacker can craft a POST request to...

eclime v1.1 (File Disclosure) Vulnerabilities

Exploit for php platform in category web applications ============================================= eclime v1.1 File Disclosure Vulnerabilities ============================================= 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, ...