Hi ;)
Durning few projects sometimes I can find that customers are using osCommerce
at their servers.
I prepare a small (poc) tool to a little bit automate a process of password cracking
and exploiting RCE available in admin panel (again ;) ).
Like I said to next week, this won't be public, sorry.
Anyway if you think that you will need it before (to test your sites or
your customers) then feel free to let me know privately, via email as always.
Have a nice day
o/
And what if you share this information with oscommerce team to fix the error. Here the forum: http://forums.oscommerce.com
ReplyDeleteYour contribution is appreciated.
regards
What if? Hm... Let me ask you same question with answer ad hoc:
ReplyDeletewhat if I done that week ago to 2 people mentioned as a members of their team and they didn't answer to this day?
This is one. Secon, what if I talk with user called 'bart' at their 'online chat' and he said that
because vuln is in admin panel they do not take it seriously? ;)
I think it is the answer for your question.
Thanks ;)