############################## ######################################################## # Vuln Title: Gianni Messina CMS 2.0 2010 MSAccess Vulnerability # # Author: Ashiyane Digital Security Team # tested on : Gianni Messina CMS 2.0 2010 # Mail : Prince.H4ck@gmail.com # Vendor : http://Gianni-Messina.com # PrinceofHacking ~~ > tnx to All Ashiyane Members # ###################################################################################### [+]Vulnerability : you can get Database content [+]Poc : http://server/[path]/adDetail.asp?cat_group=[SQLi] http://server/[path]/admin [+]Demo for Test Vuln : http://www.cremit.it/portale/adDetail.asp?cat_group=2 [+]ianni Messina CMS 2.0