Esoftpro Online Password Manager Multiple Vulnerability

=======================================================
Esoftpro Online Password Manager Multiple Vulnerability
=======================================================

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0
0     _                   __           __       __                     1
1   /' \            __  /'__`\        /\ \__  /'__`\                   0
0  /\_, \    ___   /\_\/\_\ \ \    ___\ \ ,_\/\ \/\ \  _ ___           1
1  \/_/\ \ /' _ `\ \/\ \/_/_\_<_  /'___\ \ \/\ \ \ \ \/\`'__\          0
0     \ \ \/\ \/\ \ \ \ \/\ \ \ \/\ \__/\ \ \_\ \ \_\ \ \ \/           1
1      \ \_\ \_\ \_\_\ \ \ \____/\ \____\\ \__\\ \____/\ \_\           0
0       \/_/\/_/\/_/\ \_\ \/___/  \/____/ \/__/ \/___/  \/_/           1
1                  \ \____/ >> Exploit database separated by exploit   0
0                   \/___/          type (local, remote, DoS, etc.)    1
1                                                                      1
0  [+] Site            : Inj3ct0r.com                                  0
1  [+] Support e-mail  : submit[at]inj3ct0r.com                        1
0                                                                      0
1                ###########################################           1
0                I'm L0rd CrusAd3r member from Inj3ct0r Team           1
1                ###########################################           0
0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1


Author: L0rd CrusAd3r aka VSN [[email protected]]
Exploit Title: Esoftpro Online Password Manager Multiple Vulnerability
Vendor url:http://www.esoftpro.com/
Version:4.1
Published: 2010-07-4
Greetz to:r0073r (inj3ct0r.com), Sid3^effects, MaYur, MA1201, Sonic Bluehat, Sai, KD, M4n0j.
Special Greetz: Topsecure.net, inj3ct0r Team ,Andhrahackers.com
Shoutzz:- To all ICW members.
~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~
Description:

Online Password Manager is an online application specially developed to help people store data securely online. With this program, you safely store all your logins, passwords, PIN codes, credit card numbers, memos, to-dos, access codes, and any other confidential information in one place while freely access them anytime from anywhere. There is also specially designed PDA interface allows you to use OPM through your PDA/Cell.

Unlike traditional password manager, you are not limited to access your frequently-use data from your own computer. With Online Password Manager, you can access it from any computer as long as you have Internet connection..

Also, you'll never need to keep synchronizing your data between files and computers time to time.

??? * You can access your data in your work place
??? * You can access your data during business trip
??? * You can access your data in cafes
??? * You can access your data in trains
??? * You can access your data through desktop computer, notebook, PDA and your cell phone

~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~

Vulnerability:

*SQL Vulnerability

DEMO URL:

http://www.esoftpro.com/demo/OPM/main.php?action=List&cat=[sqli]

*XSS Vulnerability

DEMO URL :

http://www.esoftpro.com/demo/OPM/main.php?action=List&cat=[xss]

*HTML Injection

DEMO URL:

http://www.esoftpro.com/demo/OPM/main.php?action=List&cat=[html]

# 0day n0 m0re #
# L0rd CrusAd3r #



#  0day.today [2018-01-08]  #