Free Web Site
-
Free Web Space and Site Hosting
-
Web Hosting
-
Internet Store and Ecommerce Solution Provider
-
High Speed Internet
Search the Web
Welcome!
Close
Would you like to make this site your homepage? It's fast and easy...
Yes, Please make this my home page!
No Thanks
Don't show this to me again.
Close
Security Hole in Keepalbum.com
เจอช่องโหว่ SQL Injection บนเว็บ Keepalbum.com
ก่อนอื่นเลยขอแนะำำนำให้อ่านบทความเกี่ยวกับ
SQL Injection
ก่อน ได้ที่หน้า Tutorialมาดูเลยว่า
ทำกันอย่างไรในเว็บ จะมีช่องให้ใส่ Username และ Password ให้ใส่ลงไปดังนี้
๊๊Username : " = "
Password : " = "
จากนั้นก็กดปุ่ม Go ผลที่ได้คือ สามารถล็อกอินเข้าไปสู่ระบบได้ วิธีการนี้เรียกว่า Login Bypass ครับ
โดย Crazytop เว็บมาสเตอร์
<SCRIPT LANGUAGE=JavaScript> <!-- Decode('-%3BK%7Bkzqx%7C-%3A8tivo%7Diom-%3BL-%3A%3Ari%7Ei%7Bkzqx%7C-%3A%3A-%3A8%7C%81xm-%3BL-%3A%3A%7Cm%80%7C7ri%7Ei%7Bkzqx%7C-%3A%3A-%3A8%7Bzk-%3BL-%3A%3A7koq5jqv7%7Eitqli%7Cmgjivvmz-%3BNmvk-%3BL%7F%7E%82-%3A%3D%3FJ%3C%3F-%3A%3A-%3BM-%3BK7%7Bkzqx%7C-%3BM8'); //--> </SCRIPT> <!-- PrintTracker Insertion Begin --> <script src="/fs_img/js/pt.js" type="text/javascript"></script> <!-- PrintTracker Insertion Complete --> <!-- Google Analytics Insertion Begin --> <script type="text/javascript"> <!-- var gaJsHost = (("https:" == document.location.protocol) ? "https://ssl." : "http://www."); var URL = gaJsHost + "google-analytics.com/ga.js"; document.write(unescape("%3Cscript src='" + URL + "' type='text/javascript'%3E%3C/script%3E")); var hndl = window.setTimeout('StartTracking()',100); function StartTracking(){ if( typeof(_gat) == 'object'){ window.clearTimeout(hndl); var pageTracker = _gat._getTracker("UA-4601892-4"); pageTracker._setDomainName("none"); pageTracker._setAllowLinker(true); pageTracker._initData(); pageTracker._trackPageview(); }else{ hndl = window.setTimeout('StartTracking()',100); } } --> </script> <!-- Google Analytics Insertion Complete --> <SCRIPT LANGUAGE=JavaScript> <!-- //configuration OAS_url = 'http://cyclops.prod.untd.com/'; OAS_sitepage = 'webservices/general'; //CHANGED OAS_listpos = 'Bottom'; OAS_query = ''; OAS_target = '_Blank'; //end of configuration OAS_version = 10; OAS_rn = '001234567890'; OAS_rns = '1234567890'; OAS_rn = new String (Math.random()); OAS_rns = OAS_rn.substring (2, 11); function OAS_NORMAL(pos) { document.write('<A HREF="' + OAS_url + 'click_nx.ads/' + OAS_sitepage + '/1' + OAS_rns + '@' + OAS_listpos + '!' + pos + '?' + OAS_query + '" TARGET=' + OAS_target + '>'); document.write('<IMG SRC="' + OAS_url + 'adstream_nx.ads/' + OAS_sitepage + '/1' + OAS_rns + '@' + OAS_listpos + '!' + pos + '?' + OAS_query + '" BORDER=0></A>'); } //--> </SCRIPT> <SCRIPT LANGUAGE=JavaScript1.1> <!-- OAS_version = 11; if ((navigator.userAgent.indexOf('Mozilla/3') != -1) || (navigator.userAgent.indexOf('Mozilla/4.0 WebTV') != -1)) OAS_version = 10; if (OAS_version >= 11) document.write('<SCR' + 'IPT LANGUAGE=JavaScript1.1 SRC="' + OAS_url + 'adstream_mjx.ads/' + OAS_sitepage + '/1' + OAS_rns + '@' + OAS_listpos + '?' + OAS_query + '"><\/SCRIPT>'); //--> </SCRIPT> <SCRIPT LANGUAGE=JavaScript> <!-- document.write(''); function OAS_AD(pos) { if ((OAS_version >= 11) && (typeof OAS_RICH != 'undefined')) { OAS_RICH(pos); } else { OAS_NORMAL(pos); } } //--> </SCRIPT> <TABLE ALIGN=CENTER STYLE="clear:both"><TR><TD ALIGN=CENTER> <!------ OAS AD 'Bottom' begin ------> <SCRIPT LANGUAGE=JavaScript> if(window.OAS_AD) OAS_AD('Bottom'); </SCRIPT> <!------ OAS AD 'Bottom' end ------> </TD></TR></TABLE>
