!c99Shell v. 1.0 pre-release build #16!

Software: Apache/2.2.3 (CentOS). PHP/5.1.6 

uname -a: Linux mx-ll-110-164-51-230.static.3bb.co.th 2.6.18-194.el5PAE #1 SMP Fri Apr 2 15:37:44
EDT 2010 i686
 

uid=48(apache) gid=48(apache) groups=48(apache) 

Safe-mode: OFF (not secure)

/var/www/html/alumni/inc/class/   drwxr-xr-x
Free 50.98 GB of 127.8 GB (39.89%)
Home    Back    Forward    UPDIR    Refresh    Search    Buffer    Encoder    Tools    Proc.    FTP brute    Sec.    SQL    PHP-code    Update    Feedback    Self remove    Logout    


Viewing file:     conthead.class.php (3.65 KB)      -rw-r--r--
Select action/file-type:
(+) | (+) | (+) | Code (+) | Session (+) | (+) | SDB (+) | (+) | (+) | (+) | (+) | (+) |
<?php

/********************************************************************************
    - MemHT Portal -
    
    Copyright (C) 2007-2008 by Miltenovik Manojlo
    http://www.memht.com
    
    This program is free software; you can redistribute it and/or modify
    it under the terms of the GNU General Public License as published by
    the Free Software Foundation; either version 2 of the License, or
    (at your opinion) any later version.
    
    This program is distributed in the hope that it will be useful,
    but WITHOUT ANY WARRANTY; without even the implied warranty of
    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
    GNU General Public License for more details.
    
    You should have received a copy of the GNU General Public License along
    with this program; if not, see <http://www.gnu.org/licenses/> (GPLv2)
    or write to the Free Software Foundation, Inc., 51 Franklin Street,
    Fifth Floor, Boston, MA02110-1301, USA.
        
********************************************************************************/

class conthead {
    
//==============================
    //DEFAULT CONFIGURATION
    //==============================
    
var $title "Missing title";
    var 
$cdate "";
    var 
$author "";
    var 
$hits 0;
    var 
$langid 0;
    var 
$langtxt "";
    var 
$prnt_url "";
    var 
$pdf_url "";
    var 
$rss_url "";
    var 
$url "";
    
    var 
$prnt true;
    var 
$pdf true;
    var 
$rss true;
    var 
$social true;
    
    function 
show() {
        global 
$dblink,$siteConfig;
        
        echo 
"<div style='font-size:140%;' class='underlined std_content_title'><b>".$this->title."</b></div>\n";
        echo 
"<div style='float:left; padding-top:2px;' class='info'><img src='images/date.png' alt='"._DATE_."' title='"._DATE_."'> ".$this->cdate."&nbsp;&nbsp;<img src='images/pencil.gif' alt='"._AUTHOR_."' title='"._AUTHOR_."'> ".$this->author."&nbsp;&nbsp;<img src='images/view.gif' alt='"._HITS_."' title='"._HITS_."'> ".$this->hits."&nbsp;&nbsp;<img src='images/ita.gif' alt='"._LANGUAGE_."' title='"._LANGUAGE_."'> <a href='index.php?page=topics&language=".$this->langid."' title=\"".$this->langtxt."\">".$this->langtxt."</a></div>\n";
        echo 
"<div style='float:right;'><table cellpadding='0' cellspacing='0' border='0' style='margin:0 0 6px 6px;'><tr><td align='left' class='box std_content_info' style='border-top:0; font-size:90%;'>\n";
            if (
$this->prnt) {
                echo 
"<div><a href='".$this->prnt_url."' title='"._PRINT_."' target='_blank'><img src='images/print.gif' border='0' alt='"._PRINT_."' align='left'>&nbsp;"._PRINT_."</a></div>\n";
            }
            if (
$this->pdf) {
                echo 
"<div style='margin:4px 0;'><a href='".$this->pdf_url."' title='PDF' target='_blank'><img src='images/pdf.gif' border='0' alt='PDF' align='left'>&nbsp;PDF</a></div>\n";
            }
            if (
$this->rss) {
                echo 
"<div><a href='".$this->rss_url."' title='"._RSS_FEEDS_."' target='_blank'><img src='images/rss-syndicate_box.gif' border='0' alt='"._RSS_FEEDS_."' align='left'>&nbsp;"._RSS_FEEDS_."</a></div>\n";
            }
            if (
$this->social) {
                
?>
                <div style='margin-top:4px;'>
                <!-- AddThis Button BEGIN -->
                <script type="text/javascript">
                    addthis_brand = 'MemHT Portal'; 
                    addthis_pub  = 'memht';
                </script>
                <a href="http://www.addthis.com/bookmark.php" onmouseover="return addthis_open(this, '', '<?php echo $this->url?>', '<?php echo $this->title?>')" onmouseout="addthis_close()" onclick="return addthis_sendto()"><img src="http://s9.addthis.com/button0-bm.gif" width="83" height="16" border="0" alt=""></a><script type="text/javascript" src="http://s7.addthis.com/js/152/addthis_widget.js"></script>
                <!-- AddThis Button END -->
                </div>
                <?php
            
}
        echo 
"</td></tr></table></div>\n";
    }
}

?>

:: Command execute ::

Enter:
 
Select:
 

:: Shadow's tricks :D ::

Useful Commands
 
Warning. Kernel may be alerted using higher levels
Kernel Info:

:: Preddy's tricks :D ::

Php Safe-Mode Bypass (Read Files)

File:

eg: /etc/passwd

Php Safe-Mode Bypass (List Directories):

Dir:

eg: /etc/

:: Search ::
  - regexp 

:: Upload ::
 
[ ok ]

:: Make Dir ::
 
[ ok ]
:: Make File ::
 
[ ok ]

:: Go Dir ::
 
:: Go File ::
 

--[ c999shell v. 1.0 pre-release build #16 Modded by Shadow & Preddy | RootShell Security Group | r57 c99 shell | Generation time: 0.0709 ]--