Ikon AdManager 2.1 (ikonBAnner_AdManager.mdb) Database Disclosure Vulnerability

vendor:

Ikon AdManager

by:

Ghost Hacker

7.5

CVSS

HIGH

Database Disclosure

200

CWE

Product Name: Ikon AdManager

Affected Version From: 2.1

Affected Version To: 2.1

Patch Exists: Yes

Related CWE: N/A

CPE: a:ikon_admanager:ikon_admanager:2.1

Metasploit: N/A

Other Scripts: N/A

Tags: N/A

CVSS Metrics: N/A

Nuclei References: N/A

Nuclei Metadata: N/A

Platforms Tested: N/A

2008

Ikon AdManager 2.1 (ikonBAnner_AdManager.mdb) Database Disclosure Vulnerability

Ikon AdManager 2.1 is vulnerable to a database disclosure vulnerability. An attacker can exploit this vulnerability by sending a request to the vulnerable application to access the database file ikonBAnner_AdManager.mdb.

Mitigation:

The vendor has released a patch to address this vulnerability. Users are advised to upgrade to the latest version of the application.

Source

Exploit-DB raw data:

####################################################################################################
# Ikon AdManager 2.1 (ikonBAnner_AdManager.mdb) Database Disclosure Vulnerability                  #
# Â© Ghost Hacker - REAL-H.COM                                                                      #
####################################################################################################
#[~] Author : Ghost Hacker                                                                         #
#[~] Homepage : http://Real-h.com                                                                  #
#[~] Contact Me : Ghost-r00t[at]Hotmail[dot]com                                                    #
#[~] Bug : Database Disclosure                                                                     #
#[~] Name Script : Ikon AdManager 2.1                                                              #
#[~] Download : http://www.dotnetindex.com/downloads/easy_download_getinfo.asp?id=7                #
####################################################################################################
#[~]Exploit                                                                                        #
# http://xxxx.com/[path]/database/ikonBAnner_AdManager.mdb                                         #
################# ###################################################################################
#[~]Greets :                                                                                       #
# Mr.SaFa7 [v4-team.com] , All Members Real-h.com and v4-team.net , All My Friends (3ed mobark)    #
####################################################################################################

# milw0rm.com [2008-12-07]