25 products from dMx READY all suffer from a remote database disclose vulnerability. Version 1.1 of Testimonials Manager, Site Engine Manager, Secure Login Manager, Secure Document Library, Registration Manager, Portfolio Manager, Polling Booth Manager, Photo Gallery Manager, PayPal Store Manager, Online Contest Manager, News Manager, Member Directory Manager, Mailing List Manager, Account List Manager, Billboard Manager, Catalog Manager, Classified Listings Manager, Contact Us Manager, Document Library Manager, Event Listing Manager, Faqs Manager, Job Listing Manager, Landing Page Manager, and Links Manager are all affected. Members Area Manager version 1.2 is also affected. DMXReady has stated that the following release addresses this security issue.
df486b4f263d494c527f0748fd3320759a556c925cc4697ca07841d882730977
***********************************************************************************************************************************************************
[!] [!]
[!] OOOO O OOOOOOOOO [!]
[!] O O O O O [!]
[!] O O O [!]
[!] O OOOO OOOO OOOOOO OOOO OOO OO O OOOO OO OO OOOO [!]
[!] O OOO OOO O O O O OO O O O O OO O O O [!]
[!] O OO OO O O OOOOOO O ******* O O O O O OOOOOO [!]
[!] O O OOOO O O O O O O O O O O O [!]
[!] OOOO OO OOOOOO OOOO OOOOOO OOOOOOOOO OOOO OOO OOO OOOO [!]
[!] OO [!]
[!] OO [!]
[!] OO Proud To Be MoroCCaN [!]
[!] OO WwW.Exploiter5.CoM My Web Site , WwW.No-Exploit.CoM JiKo web site [!]
***********************************************************************************************************************************************************
+---- Bismi Allah Irahmani ArraHim ----+
++--------------------------------------------------------------------------------------------------------------------------------------------------------+
Founded By : Cyber-Zone ( Abdelkhalek )
E-mail : Paradis_des_fous@hotmail.fr
++--------------------------------------------------------------------------------------------------------------------------------------------------------+
dMx READY ( 25 Products ) Remote Database Disclosure Vulnerability
Yea Yea , Take Down :)
Let's Start With some action :)
++--------------------------------------------------------------------------------------------------------------------------------------------------------+
Product name : Exploit : Live demo :
++--------------------------------------------------------------------------------------------------------------------------------------------------------+
Testimonials Manager 1.1 http://localhost/databases/TestimonialsManager.mdb http://www.demo.dmxready.com/databases/TestimonialsManager.mdb
Site Engine Manager 1.1 http://localhost/databases/SiteEngineManager.mdb http://www.demo.dmxready.com/databases/SiteEngineManager.mdb
Secure Login Manager 1.1 http://localhost/databases/SecureLoginManager.mdb http://www.demo.dmxready.com/databases/SecureLoginManager.mdb
Secure Document Library 1.1 http://localhost/databases/SecureDocumentLibrary.mdb http://www.demo.dmxready.com/databases/SecureDocumentLibrary.mdb
Registration Manager 1.1 http://localhost/databases/RegistrationManager.mdb http://www.demo.dmxready.com/databases/RegistrationManager.mdb
Portfolio Manager 1.1 http://localhost/databases/PortfolioManager.mdb http://www.demo.dmxready.com/databases/PortfolioManager.mdb
Polling Booth Manager 1.1 http://localhost/databases/PollingBoothManager.mdb http://www.demo.dmxready.com/databases/PollingBoothManager.mdb
Photo Gallery Manager 1.1 http://localhost/databases/PhotoGalleryManager.mdb http://www.demo.dmxready.com/databases/PhotoGalleryManager.mdb
PayPal Store Manager 1.1 http://localhost/databases/PayPalStoreManager.mdb http://www.demo.dmxready.com/databases/PayPalStoreManager.mdb
Online Contest Manager 1.1 http://localhost/databases/OnlineContestManager.mdb http://www.demo.dmxready.com/databases/OnlineContestManager.mdb
News Manager 1.1 http://localhost/databases/NewsManager.mdb http://www.demo.dmxready.com/databases/NewsManager.mdb
Members Area Manager 1.2 http://localhost/databases/MembersAreaManager.mdb http://www.demo.dmxready.com/databases/MembersAreaManager.mdb
Member Directory Manager 1.1 http://localhost/databases/MemberDirectoryManager.mdb http://www.demo.dmxready.com/databases/MemberDirectoryManager.mdb
Mailing List Manager 1.1 http://localhost/databases/MailingListManager.mdb http://www.demo.dmxready.com/databases/MailingListManager.mdb
Account List Manager 1.1 http://localhost/databases/AccountListManager.mdb http://www.demo.dmxready.com/databases/AccountListManager.mdb
Billboard Manager 1.1 http://localhost/databases/BillboardManager.mdb http://www.demo.dmxready.com/databases/BillboardManager.mdb
Catalog Manager 1.1 http://localhost/databases/CatalogManager.mdb http://www.demo.dmxready.com/databases/CatalogManager.mdb
Classified Listings Manager 1.1 http://localhost/databases/ClassifiedListingsManager.mdb http://www.demo.dmxready.com/databases/ClassifiedListingsManager.mdb
Contact Us Manager 1.1 http://localhost/databases/ContactUsManager.mdb http://www.demo.dmxready.com/databases/ContactUsManager.mdb
Document Library Manager 1.1 http://localhost/databases/DocumentLibraryManager.mdb http://www.demo.dmxready.com/databases/DocumentLibraryManager.mdb
Event Listing Manager 1.1 http://localhost/databases/EventListingManager.mdb http://www.demo.dmxready.com/databases/EventListingManager.mdb
Faqs Manager 1.1 http://localhost/databases/FaqsManager.mdb http://www.demo.dmxready.com/databases/FaqsManager.mdb
Job Listing Manager 1.1 http://localhost/databases/JobListingManager.mdb http://www.demo.dmxready.com/databases/JobListingManager.mdb
Landing Page Manager 1.1 http://localhost/databases/LandingPageManager.mdb http://www.demo.dmxready.com/databases/LandingPageManager.mdb
Links Manager 1.1 http://localhost/databases/LinksManager.mdb http://www.demo.dmxready.com/databases/LinksManager.mdb
++--------------------------------------------------------------------------------------------------------------------------------------------------------+
................................................Done!
Thanx To : Hussin X , Jiko , The_5p3ctrum , BayHay , staCk ...All Mgharba