DmxReady Contact Us Manager 1.2 – SQL Injection

• Exploit Database
• 37 阅读

• 作者： Bellatrix
  日期： 2011-07-03
• 类别：

  • webapps
  平台：

  • asp
• 来源：https://www.exploit-db.com/exploits/17479/

• # Exploit Title:DmxReady Contact Us Manager v1.2 SQL Injection Vulnerability
  # Google Dork: inurl:inc_contactusmanager.asp
  # Date: 03.07.2011
  # Author: Bellatrix
  # Software Link: http://www.dmxready.com/?product=contact-us-manager
  # Version: v1.2
  #Language: ASP
  # Price : $99.97
  # Tested on: Windows XP Sp3
  # Greetz : VoLqaN , Toprak and All Cyber-Warrior TIM members....
  
  -------------------------------------------------------------------------------------------------
  
  Bug;
  
  http://target/path/admin/CatalogManager/update.asp?ItemID=xx[SQL ATTACK]