vendor:
MidiCart PHP Shopping Cart
by:
DigitALL
8,8
CVSS
HIGH
Shell Upload Vulnerability
264
CWE
Product Name: MidiCart PHP Shopping Cart
Affected Version From: All Version
Affected Version To: All Version
Patch Exists: NO
Related CWE: N/A
CPE: N/A
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: DigitALL Xp Version x1
2010
MidiCart PHP,ASP Shell Upload Vulnerability
Go To /admin/ İf No Password(%80 No Password) Go To /add.php Your Shell Upload.Shell Go To /images/shell.php
Mitigation:
Ensure that the application is configured to use a secure password for the admin panel and also ensure that the application is configured to use a secure file upload mechanism.
