osCommerce Remote Edit Site Info Vulnerability

# Vendor or Software Link: http://www.oscommerce.com
# Version: N/A
# Category:: webapps
# Google dork:intitle:"osCommerce" inurl:"/admin/configuration. php?"

>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
demo site
http://montra.zdnic.com/admin/configuration.php
http://goldenox.com/admin/configuration.php
http://petsupplies.foryou.com.au/admin/c...ration.php
http://www.funpinswork.com/admin/configuration.php
http://montra.zdnic.com/admin/configuration.php

Exploit
you can edit Site Info

exm site name ....
0r You you can put the Java script