!C99Shell v. 1.0 pre-release build #13!

Software: Apache. PHP/5.5.15 

uname -a: Windows NT SVR-DMZ 6.1 build 7600 (Windows Server 2008 R2 Enterprise Edition) i586 

SYSTEM 

Safe-mode: OFF (not secure)

C:\Extranet\phpscripts\   drwxrwxrwx
Free 4.13 GB of 39.52 GB (10.44%)
Detected drives: [ a ] [ c ] [ d ] [ e ] [ f ]
Home    Back    Forward    UPDIR    Refresh    Search    Buffer    Encoder    Tools    Proc.    FTP brute    Sec.    SQL    PHP-code    Update    Feedback    Self remove    Logout    


Viewing file:     sellink.php (10.76 KB)      -rw-rw-rw-
Select action/file-type:
(+) | (+) | (+) | Code (+) | Session (+) | (+) | SDB (+) | (+) | (+) | (+) | (+) | (+) |
<html>
<head>
<title>Editor de Categorias, Sitio de Bogota.gov</title>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<script language="JavaScript">
<!--
function MM_callJS(jsStr) { //v2.0
  return eval(jsStr)
}
function up1() {
b = document.form34.uno.value;
a = document.form34.temassel.value;
a = b + "-" + a;
document.form34.uno.value = a;
}
//-->
</script>
<style type="text/css">
<!--
select {  font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 10px; color: #333333; background-color: #FDFEF1}
input {  font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 10px; color: #333333; background-color: #FDFEF1}
a {  text-decoration: none}
a:hover {  text-decoration: underline}
textarea {  font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 10px; color: #333333; background-color: #FDFEF1}
-->
</style>
</head>

<body bgcolor="#FFFFFF" text="#000000" topmargin="0" link="#0000FF" vlink="#0000FF" alink="#0000FF">
<table width="100%" border="0" cellspacing="0" cellpadding="0">
  <tr>
    <td width="33%">&nbsp;</td>
    <td width="34%">
      <table width="100%" border="0" cellspacing="0" cellpadding="6">
        <tr> 
          <td colspan="2"><img src="sitebanner.gif" width="543" height="104"></td>
        </tr>
        <tr> 
          <td width="50%" valign="top"> 
            <div align="center"><font face="Verdana, Arial, Helvetica, sans-serif" size="3"><b>Seleccionar 
              Vinculos <br>
              </b></font><font face="Verdana, Arial, Helvetica, sans-serif" size="1">M&oacute;dulo 
              principal de selecci&oacute;n para la edici&oacute;n, eliminaci&oacute;n 
              y adici&oacute;n de vinculos.</font></div>
          </td>
          <td width="50%"><font face="Verdana, Arial, Helvetica, sans-serif" size="1"><b>1.</b> 
            Seleccione el tipo de vinculo sobre el cual quiere trabajar.</font></td>
        </tr>
        <tr> 
          <td colspan="2"> 
            <table width="100%" border="1" cellspacing="0" cellpadding="8" bordercolor="#74BABA" bgcolor="#D7D7D7">
              <tr>
                <td> 
                  <form name="form1" method="post" action="" enctype="multipart/form-data">
                    <table width="100%" border="0" cellspacing="0" cellpadding="4">
                      <tr> 
                        <td width="35%"><font face="Verdana, Arial, Helvetica, sans-serif" size="1"><img src="plus.gif" width="12" height="12"></font> 
                          <font face="Verdana, Arial, Helvetica, sans-serif" size="2"><b>Tipo 
                          de Vinculos:</b><b></b></font></td>
                        <td colspan="3" width="65%"> <font face="Verdana, Arial, Helvetica, sans-serif" size="2">
                          <div align="center">
                            <select name="vintipo">
                              <option value="1">Sub. Sectorial</option>
                  <option value="2">Sub. Ecosistemas</option>
                  <option value="3">Sub. Jur&iacute;dica</option>
                  <option value="4">Sub. Administrativa</option>
                  <option value="5">Sub. Vivienda</option>
                  <option value="6">Of. Planeaci&oacute;n</option>
                  <option value="7">Of. Control Interno</option>
                            </select>
                            <select name="acc">
                              <option value="1">Agregar</option>
                              <option value="2">Editar o Eliminar</option>
                            </select>
                            <input type="submit" name="Submit3" value="Ver...">
                          </div>
                          </font></td>
                      </tr>
                    </table>
                  </form>
                  
                </td>
              </tr>
            </table>
			<?php
			$w = isset($acc);
			if ($w == true and $acc == 1) {
			?>
            <p><font face="Verdana, Arial, Helvetica, sans-serif" size="1"><b>2.</b> 
              Seleccione las categorias (Temas) a las que aplica el vinculo. Para 
              seleccionar m&aacute;s de una, haga clic sobre cada una de ellas, 
              en la casilla inferior se acumular&aacute;n los c&oacute;digos de 
              los &iacute;tems seleccionados..</font></p>
            <table width="100%" border="1" cellspacing="0" cellpadding="8" bordercolor="#74BABA" bgcolor="#D5EAEA">
              <tr> 
                <td> 
                  <form name="form34" method="post" action="../php/reqaddlink.php" enctype="multipart/form-data">
                    <table width="100%" border="0" cellspacing="0" cellpadding="4">
                      <tr> 
                        <td width="34%"> 
                          <p><font face="Verdana, Arial, Helvetica, sans-serif" size="1"><img src="plus.gif" width="12" height="12"></font> 
                            <font face="Verdana, Arial, Helvetica, sans-serif" size="2"><b>Categorias 
                            o Temas:</b></font></p>
                          <p align="center"><font face="Verdana, Arial, Helvetica, sans-serif" size="2"> 
                            <input type="submit" name="Submit32" value="Continuar...">
                            </font></p>
                        </td>
                        <td colspan="3" width="66%"> <font face="Verdana, Arial, Helvetica, sans-serif" size="2"> 
                          <div align="center"> 
                            <select name="temassel" size="10"  onChange="MM_callJS('up1()')" multiple>
                              <?php
							$vintipo = $vintipo . ".";
							$lenvin = strlen($vintipo);
							$lenvin = $lenvin + 2;
							include('conect/conect.php');
							if ($vintipo == "0.") {
							$consul = "SELECT *
							FROM cate where tema_id like '1.%' or tema_id like '2.%' or tema_id like '3.%'"
							. " order by tema_id";
							}else{
							$consul = "SELECT *
							FROM cate where tema_id like '$vintipo%'"
							. " order by tema_id";
							}
							$result = mysql_query($consul,$db);
							$num_filas = mysql_num_rows($result);
							while ($myrow = mysql_fetch_array($result))
							{
							$temaid = $myrow["tema_id"];
							$id = $myrow["id"];
							$nombre = $myrow["tema_desc"];
							$gata = strlen($temaid);
							if ($gata == $lenvin) {
							$nombre = strtoupper($nombre);
							echo "<option value=\"$temaid\">$nombre</option>";
							}
							if ($gata > $lenvin) {
							$gata = $gata / 2;
							$gu = "";
							for ($i = 1; $i <= $gata; $i++) {
							$gu = $gu . "-";
							} 
							$nombre = $gu . $nombre;
							echo "<option value=\"$temaid\">$nombre</option>";
							}
							}
							?>
                            </select>
                          </div>
                          </font></td>
                      </tr>
                      <tr> 
                        <td colspan="4">
                          <div align="center"><font face="Verdana, Arial, Helvetica, sans-serif" size="2">Items 
                            seleccionados: 
                            <input type="text" name="uno" size="40">
                            <input type="reset" name="Submit2" value="Limpiar">
                            </font></div>
                        </td>
                      </tr>
                    </table>
                  </form>
                </td>
              </tr>
            </table>
			<?php } ?>
			<?php
			$w = isset($acc);
			if ($w == true and $acc == 2) {
			?>
            <p><font face="Verdana, Arial, Helvetica, sans-serif" size="1"><b>2.</b> 
              Seleccione el vinculo que quiere eliminar o editar, recuerde que 
              a continuaci&oacute;n se listan todos los vinculos en orden alfabeticamente.</font></p>
            <table width="100%" border="1" cellspacing="0" cellpadding="8" bordercolor="#74BABA" bgcolor="#D5EAEA">
              <tr> 
                <td> 
                  <form name="form1" method="post" action="../php/reqedit.php" enctype="multipart/form-data">
                    <table width="100%" border="0" cellspacing="0" cellpadding="4">
                      <tr> 
                        <td> 
                          <p><font face="Verdana, Arial, Helvetica, sans-serif" size="1"><img src="plus.gif" width="12" height="12"></font> 
                            <font face="Verdana, Arial, Helvetica, sans-serif" size="2"><b>Vinculos 
                            en orden alfabetico:</b> <br>
                            &iquest;Qu&eacute; acci&oacute;n va a realizar? 
                            <select name="acc">
                              <option value="1" selected>Editar</option>
                              <option value="2">Borrar</option>
                            </select>
                            (<font color="#FF0000">*</font>)</font><font face="Verdana, Arial, Helvetica, sans-serif" size="2"><br>
                            </font></p>
                          <div align="center"> <font face="Verdana, Arial, Helvetica, sans-serif" size="2">
                            <div align="left">
							<select name="links">
							<?php
							$vintipo = $vintipo . ".";
							include('conect/conect.php');
							$consul = "SELECT *
							FROM links where temas_id like '%$vintipo%'"
							. " order by nombre";
							$result = mysql_query($consul,$db);
							$num_filas = mysql_num_rows($result);
							while ($myrow = mysql_fetch_array($result))
							{
							$nombre = $myrow["nombre"];
							$id = $myrow["id"];
							$tula = substr($nombre, 0, 80);
							$tula = $tula . "...";
							echo "<option value=\"$id\">$tula</option>";
							}
							
							?>
                              </select>
                              <input type="submit" name="Submit" value="Ir">
                            </div>
                            </font></div>
                        </td>
                      </tr>
                    </table>
                  </form>
                </td>
              </tr>
            </table>
            <?php } ?>
          </td>
        </tr>
        <tr> 
          <td colspan="2"><img src="footer.gif" width="543" height="36"></td>
        </tr>
        <tr> 
          <td colspan="2"> 
            <div align="center"><font face="Verdana, Arial, Helvetica, sans-serif" size="1">Departamento 
              T&eacute;cnico Administrativo del Medio Ambiente DAMA<br>
              Sistema de Informaci&oacute;n Ambiental, SIA-DAMA<br>
              M&oacute;dulo Interno de Administraci&oacute;n.</font></div>
          </td>
        </tr>
      </table>
    </td>
    <td width="33%">&nbsp;</td>
  </tr>
</table>
</body>
</html>

:: Command execute ::

Enter:
 
Select:
 

:: Search ::
  - regexp 

:: Upload ::
 
[ ok ]

:: Make Dir ::
 
[ ok ]
:: Make File ::
 
[ ok ]

:: Go Dir ::
 
:: Go File ::
 

--[ c99shell v. 1.0 pre-release build #13 powered by Captain Crunch Security Team | http://ccteam.ru | Generation time: 0.0156 ]--