DmxReady News Manager 1.2 – SQL Injection

• Exploit Database
• 11 阅读

• 作者： Bellatrix
  日期： 2011-07-03
• 类别：

  • webapps
  平台：

  • asp
• 来源：https://www.exploit-db.com/exploits/17475/

• # Exploit Title: DmxReady News Manager v1.2 SQL Injection Vulnerability
  # Google Dork: inurl:inc_newsmanager.asp
  # Date: 03.07.2011
  # Author: Bellatrix
  # Software Link: http://www.dmxready.com/?product=news-manager
  # Version: v1.2
  #Language: ASP
  # Price : $99.97
  # Tested on: Windows XP Sp3
  # Greetz : VoLqaN , Toprak and All Cyber-Warrior TIM members....
  
  -------------------------------------------------------------------------------------------------
  Bug ;
  
  http://target/path/admin/NewsManager/update.asp?ItemID=[SQL ATTACK]