Online Notebook Manager - SQL Injection
| Reporter | Title | Published | Views | Family All 7 |
|---|---|---|---|---|
 | CVE-2010-2342 | 9 Jun 201000:00 | – | circl |
 | CVE-2010-2342 | 21 Jun 201015:00 | – | cve |
 | CVE-2010-2342 | 21 Jun 201015:00 | – | cvelist |
 | EUVD-2010-2352 | 7 Oct 202500:30 | – | euvd |
 | CVE-2010-2342 | 21 Jun 201015:30 | – | nvd |
 | Sql injection | 21 Jun 201015:30 | – | prion |
 | CVE-2010-2342 | 22 May 202500:25 | – | redhatcve |
Author: L0rd CrusAd3r aka VSN [[email protected]]
Exploit Title: Online Notebook Manager SQLi Vulnerability
Version:1.0
Price:$149.97
Vendor url:http://dmxready.com/?product=online-notebook-manager
Published: 2010-06-09
Greetz to:Sid3^effects, MaYur, M4n0j, Dark Blue™®, S1ayer,d3c0d3r and to all ICW members
###############################################################################################################################################################################################
Online Notebook Manager SQLi Vulnerability
Author: L0rd CrusAd3r aka VSN [[email protected]]
#####################################################################################################################################################################################################
Description:
DMXReady Online Notebook Manager is an easy-to-use application that helps you create, edit, and manage your online documents.
Use as a fast web publisher, build a mini-website, or keep it as your own private online journal.
1. Use with any standard web browser like Internet Explorer, Firefox, Safari
2. Structure your notebook as an online document or mini-website
3. Publish your information quickly and easily - no need for IT
4. Navigate easily with built-in Navigation Bar/Table of Contents
5. Skin with ANY template using Dreamweaver or any other HTML editor
6. Enhance your content by embedding Web 2.0 apps like Google Docs and YouTube Videos
7. Use as a stand-alone, or integrate with your current website
8. Easily find content with built-in keyword search
9. Secure admin pages - built-in login with lost password feature
10. W3C Valid CSS and XHTML markup
11. MySQL, MSSQL compatible
12. Create multiple notebooks with just one installation!
Creating your own online content does not get any easier. DMXReady Online Notebook Manager offers all the flexibility and functionality you need to collect, store, and publish your information.
#######################################################################################################################################################################################################
Vulnerability:
*SQLi Vulnerability
Admin Control:
Usename:admin
Password:admin
DEMO URL :http://site.com/onlinenotebookmanager.asp?ItemID=[SQLi]
-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
# 0day n0 m0re #
-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
##########################################################################################################################################################################################Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
09 Jun 2010 00:00Current
5.2Medium risk
Vulners AI Score5.2
CVSS 27.5
EPSS0.00907