!C99Shell v. 1.0 pre-release build #13!

Software: Apache. PHP/5.5.15 

uname -a: Windows NT SVR-DMZ 6.1 build 7600 (Windows Server 2008 R2 Enterprise Edition) i586 

SYSTEM 

Safe-mode: OFF (not secure)

C:\Extranet\phpscripts\   drwxrwxrwx
Free 4.15 GB of 39.52 GB (10.5%)
Detected drives: [ a ] [ c ] [ d ] [ e ] [ f ]
Home    Back    Forward    UPDIR    Refresh    Search    Buffer    Encoder    Tools    Proc.    FTP brute    Sec.    SQL    PHP-code    Update    Feedback    Self remove    Logout    


Viewing file:     edcats.php (3.8 KB)      -rw-rw-rw-
Select action/file-type:
(+) | (+) | (+) | Code (+) | Session (+) | (+) | SDB (+) | (+) | (+) | (+) | (+) | (+) |
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<title>Noticias Ambientales del DAMA</title>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<style type="text/css">
<!--
button {
    font-family: "Times New Roman", Times, serif;
    font-size: 12px;
    color: #000000;
    background-color: #99CCFF;
}
input {
    font-family: "Times New Roman", Times, serif;
    font-size: 14px;
    color: #000000;
    background-color: #E6F2FF;
    border: 1px solid #999999;
}
select {
    font-family: "Times New Roman", Times, serif;
    font-size: 14px;
    color: #000000;
    background-color: #E6F2FF;
}
textarea {
    font-family: "Times New Roman", Times, serif;
    font-size: 14px;
    color: #000000;
    background-color: #E6F2FF;
}
-->
</style>
</head>
<?php
$fr 
= isset($accion);
if (
$fr == true) {
require(
'conexion3.php');
if (
$accion == 1) {
$query ="DELETE FROM catnew where catid=$cats";
$result mysql_query($query,$db);
}else{
$query ="INSERT INTO catnew VALUES('','$cato')";
$result mysql_query($query,$db);
}
}
?>
<body link="#0099CC" vlink="#0099CC" alink="#0099CC">
<table width="100%" border="0" cellpadding="5">
  <tr> 
    <td><div align="center"><img src="prensa.gif" width="500" height="113"></div></td>
  </tr>
  <tr> 
    <td bgcolor="#000000"><font color="#FFFFFF" size="2" face="Verdana, Arial, Helvetica, sans-serif"><strong>M&oacute;dulo 
      de Administraci&oacute;n de Noticias</strong></font></td>
  </tr>
  <tr> 
    <td><font color="#999999" size="6" face="Times New Roman, Times, serif">Editor 
      de Categorias:</font></td>
  </tr>
  <tr> 
    <td><form name="form1" method="post" action="requirenew2.php">
        <table width="100%" border="0" cellpadding="5" bgcolor="#E2E2E2">
          <tr> 
            <td width="50%">1-) <strong>Borrar Categorias:</strong><br>
              Seleccione la categoria y haga clic en borrar.</td>
            <td width="50%"><strong> 
              <input name="accion" type="hidden" id="accion" value="1">
              <select name="cats" id="mes">
              <?php
              
require('conexion3.php');
              
$consul "SELECT *
            FROM catnew"
;
            
$result mysql_query($consul,$db);
            
$num_filas mysql_num_rows($result);
            while (
$myrow mysql_fetch_array($result))
            {
            
$idcx $myrow["catid"];
            
$nocx $myrow["catno"];
            echo 
"<option value=\"$idcx\">$nocx</option>";
            }
              
?>
              </select>
              <input type="submit" name="Submit" value="Borrar">
              </strong></td>
          </tr>
        </table>
      </form></td>
  </tr>
  <tr> 
    <td>
<form name="form2" method="post" action="requirenew2.php">
        <table width="100%" border="0" cellpadding="5">
          <tr bgcolor="#CCCCCC"> 
            <td width="50%">2)<strong> A&ntilde;adir Categorias:</strong></td>
            <td>Nombre de la Categoria: 
              <input type="text" name="cato">
              <strong> 
              <input name="accion" type="hidden" id="accion" value="2">
              <input type="submit" name="Submit2" value="A&ntilde;adir">
              </strong> </td>
          </tr>
        </table>
      </form>
      <p><font size="3" face="Times New Roman, Times, serif"><strong>&iquest;C&oacute;mo 
        usar esta aplicaci&oacute;n?</strong></font></p>
      </td>
  </tr>
  <tr> 
    <td bgcolor="#000000">&nbsp;</td>
  </tr>
  <tr> 
    <td><font size="2" face="Times New Roman, Times, serif">Cont&aacute;ctenos 
      en: <a href="mailto:prensa@dama.gov.co">prensa@dama.gov.co</a><br>
      Todos los Derechos Reservados para el DAMA<br>
      Departamento T&eacute;cnico Administrativo del Medio Ambiente.<br>
      Subsistema del Sistema de Informaci&oacute;n Ambiental SIA-DAMA<br>
      2003. </font></td>
  </tr>
</table>
</body>
</html>

:: Command execute ::

Enter:
 
Select:
 

:: Search ::
  - regexp 

:: Upload ::
 
[ ok ]

:: Make Dir ::
 
[ ok ]
:: Make File ::
 
[ ok ]

:: Go Dir ::
 
:: Go File ::
 

--[ c99shell v. 1.0 pre-release build #13 powered by Captain Crunch Security Team | http://ccteam.ru | Generation time: 0.0312 ]--