DMXReady Registration Manager 1.2 – SQL Injection

• Exploit Database
• 15 阅读

• 作者： Bellatrix
  日期： 2011-07-03
• 类别：

  • webapps
  平台：

  • asp
• 来源：https://www.exploit-db.com/exploits/17478/

• # Exploit Title: DMXReady Registration Manager v1.2 SQL Injection
  Vulneratbility
  # Google Dork: inurl:inc_registrationmanager.asp
  # Date: 03.07.2011
  # Author: Bellatrix
  # Software Link:
  http://www.dmxready.com/?product=registration-manager
  # Version: v1.2
  #Language: ASP
  # Price : $99.97
  # Tested on: Windows XP Sp3
  # Greetz : VoLqaN , Toprak and All Cyber-Warrior TIM members....
  
  -------------------------------------------------------------------------------------------------
  
  Bug;
  
  http://target/path/admin/RegistrationManager/update.asp?MemberID=xx [ SQL
  ATTACK]