Source: http://www.badstore.net/

v1.0 – Original version for 2004 RSA Show

v1.1 – Added:

• More supported NICs.

• Referrer checking for Supplier Upload.

• badstore.old in /cgi-bin/

• Select icons added to the /icons/ directory.

v1.2 – Version presented at CSI 2004

Added:

• Full implementation of MySQL.

• JavaScript Redirect in index.html.

• JavaScript validation of a couple key fields.

• My Account services, password reset and recovery.

• Numerous cosmetic updates.

• 'Scanbot Killer' directory structure to detect scanners.

• favicon.ico.

• Reset files and databases to original state without reboot.

• Dynamic dates and times in databases.

• Additional attack possibilities.

Source: BadStore_Manual.pdf