TomatoCart 1.1 - (Authenticated) Local File Inclusion

Exploit Title: TomatoCart 1.1 PostAuth Local File Include Google Dork: "Powered by TomatoCart" Date: 25.10.2010 Author: brainpillow Software Link: http://www.tomatocart.com/ Version: 1.1 ========================================================= Vuln. code: if $osCCustomer-isLoggedOn === true if...