# Exploit Title: osCommerce v2.2 Change Admin Pass # Date: [date] # Author: daandeveloper33 # Software Link: http://oscommerce.com/ # Version: v2.2 # Tested on: Mac OS X 10.6.4, osCommerce v2.2 RC2A (Dutch) This is the code that you can execute to change the admin pass: -------crack.php------- ---------------------------- This is the code to protect against this attack: First Write protection.php: -------protection.php----- window.location = 'http://server/index.php';";}?>----------------------------Save protection.php in the admin map of oscommercethen paste following code in all pages in the /admin map(expect login.php): include('protection.php') Greets, daandeveloper33