Micronetsoft RV Dealer Website - SQL Injection
| Reporter | Title | Published | Views | Family All 6 |
|---|---|---|---|---|
 | CVE-2010-4919 | 6 Sep 201000:00 | – | circl |
 | CVE-2010-4919 | 8 Oct 201110:00 | – | cve |
 | CVE-2010-4919 | 8 Oct 201110:00 | – | cvelist |
 | EUVD-2010-4883 | 7 Oct 202500:30 | – | euvd |
 | CVE-2010-4919 | 8 Oct 201110:55 | – | nvd |
 | Sql injection | 8 Oct 201110:55 | – | prion |
Author: L0rd CrusAd3r aka VSN [[email protected]]
Exploit Title: Micronetsoft RV Dealer Website SQLi Vulnerability
Vendor url:http://www.micronetsoft.com
Version:1
Price:199$
Published: 2010-09-06
GThanx to:r0073r (inj3ct0r.com), Sid3^effects, MaYur, MA1201, Sonic Bluehat,
M4n0j,NoCare, The_Exploited, SeeMe, gunslinger, Th3 RDX.
Greetz to : Inj3ct0r Exploit DataBase (inj3ct0r.com) , 0xr00t.com , members
and my friends :) etc....
Special Greetz: Topsecure.net, inj3ct0r Team ,Andhrahackers.com
Shoutzz:- To all ICW & Inj3ct0r members.
~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~
Description:
Features:
* Provides the ability to add listings to the web site.
* Ability to add multiple users
* Post-unlimited listings
* For Sale listings with link to details page
* For Rent listings with link to details page
* Upload Images for listing
* Upload a Brochure about the listing
* Listings display the company logo
* Search the database Vehicle Type, Make, Model, Year, Price Range, and
Location.
* Featured Listings
* Prospective Buyer signup - will receive email on NEW Listings!
* Submit work order (maintenance issue) with picture, for listings
* Full database driven web application - Access database
~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~
Vulnerability:
*SQL Vulnerability
DEMO URL:
http://www.site.com/detail.asp?ad_ID=1&vehicletypeID=[sqli]
# 0day n0 m0re #
# L0rd CrusAd3r #Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
06 Sep 2010 00:00Current
5.2Medium risk
Vulners AI Score5.2
CVSS 27.5
EPSS0.01003