!C99Shell v. 1.0 pre-release build #13!

Software: Apache. PHP/5.5.15 

uname -a: Windows NT SVR-DMZ 6.1 build 7600 (Windows Server 2008 R2 Enterprise Edition) i586 

SYSTEM 

Safe-mode: OFF (not secure)

C:\Extranet\phpscripts\   drwxrwxrwx
Free 4.13 GB of 39.52 GB (10.45%)
Detected drives: [ a ] [ c ] [ d ] [ e ] [ f ]
Home    Back    Forward    UPDIR    Refresh    Search    Buffer    Encoder    Tools    Proc.    FTP brute    Sec.    SQL    PHP-code    Update    Feedback    Self remove    Logout    


Viewing file:     nove.php (19.01 KB)      -rw-rw-rw-
Select action/file-type:
(+) | (+) | (+) | Code (+) | Session (+) | (+) | SDB (+) | (+) | (+) | (+) | (+) | (+) |
<?php
    $accion 
= isset($acc);
    
// 1. Adición de Novedades
    
if ($accion == true) {
        if (
$acc == 1) {
            require(
'hoyformat.php');
            require(
'conexion3.php');
            
$query ="INSERT INTO novedades VALUES('','$mensaje','$link','$fecha','$titulo')";
            
$result mysql_query($query,$db);
        }
        if (
$acc == 2) {
            require(
'conexion3.php');
            
$query ="DELETE from novedades where id=$id";
            
$result mysql_query($query,$db);
        }
    }
?>

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<html>
<head>
<title>mi DAMA</title>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<style type="text/css">
<!--
body,td,th {
    font-family: Verdana, Arial, Helvetica, sans-serif;
    font-size: 10px;
    color: #000000;
}
body {
    background-color: #333333;
}
.Estilo5 {
    color: #FFFFFF;
    font-weight: bold;
}
a:link {
    color: #333333;
    text-decoration: none;
}
a:visited {
    color: #333333;
    text-decoration: none;
}
a:active {
    color: #FF3300;
    text-decoration: none;
}
a:hover {
    text-decoration: underline;
}
.Estilo48 {font-size: 18}
.Estilo49 {font-size: 12px}
.Estilo54 {font-family: Verdana, Arial, Helvetica, sans-serif}
.Estilo55 {font-size: 12}
.style1 {color: #999999}
.style2 {
    color: #FFFFFF;
    font-size: 20px;
}
input {
    font-family: Verdana, Arial, Helvetica, sans-serif;
    font-size: 10px;
    color: #666666;
    background-color: #F3F3F3;
    border: 1px solid #99CCCC;
}
-->
</style>
<script language="JavaScript" type="text/JavaScript">
<!--
function MM_preloadImages() { //v3.0
  var d=document; if(d.images){ if(!d.MM_p) d.MM_p=new Array();
    var i,j=d.MM_p.length,a=MM_preloadImages.arguments; for(i=0; i<a.length; i++)
    if (a[i].indexOf("#")!=0){ d.MM_p[j]=new Image; d.MM_p[j++].src=a[i];}}
}

function MM_swapImgRestore() { //v3.0
  var i,x,a=document.MM_sr; for(i=0;a&&i<a.length&&(x=a[i])&&x.oSrc;i++) x.src=x.oSrc;
}

function MM_findObj(n, d) { //v4.01
  var p,i,x;  if(!d) d=document; if((p=n.indexOf("?"))>0&&parent.frames.length) {
    d=parent.frames[n.substring(p+1)].document; n=n.substring(0,p);}
  if(!(x=d[n])&&d.all) x=d.all[n]; for (i=0;!x&&i<d.forms.length;i++) x=d.forms[i][n];
  for(i=0;!x&&d.layers&&i<d.layers.length;i++) x=MM_findObj(n,d.layers[i].document);
  if(!x && d.getElementById) x=d.getElementById(n); return x;
}

function MM_swapImage() { //v3.0
  var i,j=0,x,a=MM_swapImage.arguments; document.MM_sr=new Array; for(i=0;i<(a.length-2);i+=3)
   if ((x=MM_findObj(a[i]))!=null){document.MM_sr[j++]=x; if(!x.oSrc) x.oSrc=x.src; x.src=a[i+2];}
}
//-->
</script>
<script language="JavaScript" type="text/JavaScript">
<!--

function MM_reloadPage(init) {  //reloads the window if Nav4 resized
  if (init==true) with (navigator) {if ((appName=="Netscape")&&(parseInt(appVersion)==4)) {
    document.MM_pgW=innerWidth; document.MM_pgH=innerHeight; onresize=MM_reloadPage; }}
  else if (innerWidth!=document.MM_pgW || innerHeight!=document.MM_pgH) location.reload();
}
MM_reloadPage(true);
//-->
</script>
<style type="text/css">
<!--
.tabla1 {
    border: 1px none #CCCCCC;
}
textarea {
    font-family: Verdana, Arial, Helvetica, sans-serif;
    font-size: 10px;
    color: #666666;
    border: 1px solid #99CCCC;
}
select {
    font-family: Verdana, Arial, Helvetica, sans-serif;
    font-size: 10px;
    color: #333333;
    background-color: #F3F3F3;
    border: 1px solid #66CCFF;
}
-->
</style>
<style type="text/css">
<!--
button {
    font-family: Verdana, Arial, Helvetica, sans-serif;
    font-size: 10px;
    color: #666666;
    background-color: #9FEDFD;
}
.Highlight {background-color:#999999}
.Normal{background-color:#666666}
-->
</style>
</head>
<body onload="MM_preloadImages('../../../Documents%20and%20Settings/nicrey/Desktop/Nicolas%20Rey%20G/Intranet/sinestesia/MiDAMA_RO_002.jpg','../../../Documents%20and%20Settings/nicrey/Desktop/Nicolas%20Rey%20G/Intranet/sinestesia/BogBann_E05b.jpg','../../../Documents%20and%20Settings/nicrey/Desktop/Nicolas%20Rey%20G/Intranet/sinestesia/Intra_dam01b.jpg','../../../Documents%20and%20Settings/nicrey/Desktop/Nicolas%20Rey%20G/Intranet/madam/mima/atardecercosmico_02b.jpg','../../../Documents%20and%20Settings/nicrey/Desktop/Nicolas%20Rey%20G/Intranet/madam/mima/atardecercosmico_03b.jpg','../../../Documents%20and%20Settings/nicrey/Desktop/Nicolas%20Rey%20G/Intranet/madam/mima/atardecercosmico_04b.jpg','../../../Documents%20and%20Settings/nicrey/Desktop/Nicolas%20Rey%20G/Intranet/madam/mima/BogBann_D02.jpg')">
<div align="center"> <a href="reqintranet.php"><img src="imadam/inicio10.jpg" width="760" height="100" border="0"></a> 
  <table width="760" border="0" cellpadding="1" cellspacing="0">
    <tr bgcolor="#666666"> 
      <td width="65" class="Normal" onmouseover="this.className='Highlight'" onmouseout="this.className='Normal'"><div align="center"><a href="reqintranet.php?user=<?php echo $user?>"><font color="#FFFFFF">INICIO</font></a></div></td>
      <td width="75" bgcolor="#CC0000"><div align="center"><span class="Estilo56"><strong><a href="reqnoticias2.php?user=<?php echo $user?>"><font color="#FFFFFF">NOTICIAS</font></a></strong></span></div></td>
      <td width="78" bgcolor="#666666" class="Normal" onmouseover="this.className='Highlight'" onmouseout="this.className='Normal'"><div align="center"><a href="reqsistemasform2.php?user=<?php echo $user?>"><span class="Estilo56"><font color="#FFFFFF">SOPORTE</font></span></a></div></td>
      <td width="102" class="Normal" onmouseover="this.className='Highlight'" onmouseout="this.className='Normal'"><div align="center"><a href="reqlegis.php?user=<?php echo $user?>"><span class="Estilo56"><font color="#FFFFFF">LEGISLACI&Oacute;N</font></span></a></div></td>
      <td width="90" bgcolor="#666666" class="Normal" onmouseover="this.className='Highlight'" onmouseout="this.className='Normal'"><div align="center"><a href="reqdamaweb.php?user=<?php echo $user?>"><span class="Estilo56"><font color="#FFFFFF">DAMA 
          WEB</font> </span></a></div></td>
      <td width="81" class="Normal" onmouseover="this.className='Highlight'" onmouseout="this.className='Normal'"><div align="center"><a href="reqlinks.php?user=<?php echo $user?>"><span class="Estilo56"><font color="#FFFFFF">LINKS</font> 
          </span></a></div></td>
      <td width="81" bgcolor="#666666" class="Normal" onmouseover="this.className='Highlight'" onmouseout="this.className='Normal'"><div align="center"><a href="reqrediseno.php?user=<?php echo $user?>"><span class="Estilo56"><font color="#FFFFFF">REDISE&Ntilde;O</font></span></a></div></td>
      <td width="72" bgcolor="#666666" class="Normal" onmouseover="this.className='Highlight'" onmouseout="this.className='Normal'"><div align="center"><a href="reqparticipate.php?user=<?php echo $user?>"><span class="Estilo56"><font color="#FFFFFF">PARTICIPE</font></span></a></div></td>
      <td width="78" bgcolor="#666666" class="Normal" onmouseover="this.className='Highlight'" onmouseout="this.className='Normal'"><div align="center"><a href="reqindice.php?user=<?php echo $user?>"><span class="Estilo56"><font color="#FFFFFF">INDICE</font></span></a></div></td>
    </tr>
  </table>
</div>
<table align="center" border="0" cellpadding="0" cellspacing="0" width="760">
  <tbody>
    <tr bgcolor="#FFFFFF"> 
      <td bgcolor="#CC0000">&nbsp;</td>
    </tr>
  </tbody>
</table>
<table width="760" height="276" border="0" align="center" cellpadding="0" cellspacing="20" bgcolor="#CC0000">
  <tr> 
    <td width="520" valign="top" bordercolor="#FFCC00" bgcolor="#FFFFFF"> 
      <table width="100%" border="0" cellspacing="0" cellpadding="16">
        <tr> 
          <td><table width="100%" border="0" cellspacing="0" cellpadding="6">
              <tr bgcolor="#A7FAFE"> 
                <td bgcolor="#FFFF99"> <div align="left"><font size="3"><strong>Nuevo 
                    en www.dama.gov.co</strong></font></div></td>
              </tr>
              <tr> 
                <td><table width="100%" border="0" cellpadding="2" cellspacing="0">
                    <tr valign="middle"> 
                      <td valign="top"> <table width="100%" border="0" cellspacing="0" cellpadding="12">
                          <tr> 
                            <td><div align="left"> 
                                <p><font color="#666666">Esta secci&oacute;n busca 
                                  informar y participar a los funcionarios y contratistas 
                                  del DAMA sobre la realizaci&oacute;n y publicaci&oacute;n 
                                  de nuevas secciones y servicios en la p&aacute;gina 
                                  web de la entidad.</font></p>
                                <p><font color="#666666">A trav&eacute;s de esta 
                                  informaci&oacute;n se espera obtener diferentes 
                                  criterios y conceptos para seguir adelante con 
                                  el proceso de construcci&oacute;n y evoluci&oacute;n 
                                  de la p&aacute;gina web. Participe a trav&eacute;s 
                                  del <a href="#">foro Web del DAMA</a> o cont&aacute;ctenos 
                                  en: <a href="mailto:midama2005@yahoo.com">midama2005@yahoo.com</a></font></p>
                              </div></td>
                          </tr>
                        </table></td>
                    </tr>
                  </table></td>
              </tr>
              <tr> 
                <td align="left"> 
                  <div id="Layer1" style="position:absolute; width:480px; height:195px; z-index:1; overflow: auto; visibility: visible;"> 
                    <table width="95%" border="0" cellspacing="0" cellpadding="6">
                      <tr> 
                        <?php
                      $inicio 
= isset($ini);
                    if (
$inicio == false) {
                        
$ini 0;
                    }
                    
$lim $ini 25;
                                  
                      require(
'conexion3.php');
                    
$consul "SELECT *
                    FROM novedades order by id DESC"
;
                    
$result mysql_query($consul,$db);
                    
$num_filas mysql_num_rows($result);
                  
?>
                        <td bgcolor="#F3F3F3">ULTIMAS NOVEDADES 
                          <div align="right"> </div></td>
                      </tr>
                      <?php
                
require('conexion3.php');
                
$consul "SELECT *
                FROM novedades order by id DESC"
;
                
$result mysql_query($consul,$db);
                
$num_filas mysql_num_rows($result);
                  while (
$myrow mysql_fetch_array($result))
                {
                
$tid $myrow["id"];
                
$tit $myrow["titulo"];
                
$tex $myrow["texto"];
                
$tli $myrow["link"];
                
$fec $myrow["fecha"];
                
?>
                      <tr> 
                        <td><div align="left"><font color="#A7FAFE"><strong><a href="<?php echo $tli?>"><?php echo $tit?></a></strong></font> 
                            <font color="#FFCC00">(<?php echo $fec?>)</font> 
                            <?php if ($user == "EMAIL" or $user == "CARNEI") { ?>
                            (<a href="reqnove.php?user=<?php echo $user?>&acc=2&id=<?php echo $tid?>">X</a>) 
                            <?php ?>
                            <br>
                            <font color="#666666"><?php echo $tex?></font> </div></td>
                      </tr>
                      <?php ?>
                    </table>
                  </div></td>
              </tr>
            </table>
            <blockquote> 
              <blockquote> 
                <p>&nbsp;</p>
                <p>&nbsp;</p>
              </blockquote>
            </blockquote></td>
        </tr>
      </table>
      </td>
    <td width="180" bgcolor="#CCCC99">
<form name="form1" method="post" action="">
          
        <table width="100%" border="0" cellpadding="6" cellspacing="0" bgcolor="#CCCC99">
          <tr bgcolor="#33CCFF"> 
              
            <td bgcolor="#99CCCC"><font color="#000000" size="1" face="Verdana, Arial, Helvetica, sans-serif">AGREGAR 
              UNA NOVEDAD</font></td>
            </tr>
            <tr>
              <td>
              <?php
              
if ($user != "EMAIL") {?>
                
              <div id="Layer2" style="position:absolute; width:170px; height:115px; z-index:2; background-color: #CCCC99; layer-background-color: #CCCC99;"> 
                <table width="100%" border="0" cellpadding="8" cellspacing="0" bgcolor="#CCCC99">
                  <tr>
                      <td><p><font color="#333333">Regrese a la p&aacute;gina 
                          anterior, ingrese su nombre de usuario y clave en la 
                          secci&oacute;n de herramientas. </font></p>
                        <p><font color="#333333">Si 
                          tiene permisos podr&aacute; volver a esta p&aacute;gina 
                          y agregar una novedad de la p&aacute;gina web..</font></p></td>
                    </tr>
                  </table>
                </div>
                <p>&nbsp;</p>
                <p>&nbsp;</p>
                <p>&nbsp;</p>
                <p>&nbsp;</p><?php ?></td>
            </tr>
            <tr> 
              <td><div align="center"><font color="#666666">T&iacute;tulo:</font> 
                <font color="#666666">
                <?php if ($user == "EMAIL") { ?>
                <input name="titulo" type="text" id="titulo" size="17">
                </font> 
                <?php ?>
              </div></td>
            </tr>
            <tr> 
              <td><div align="center"> <font color="#666666">
                <?php if ($user == "EMAIL") { ?>
                Link: 
                <input name="link" type="text" id="link">
                </font>
                <?php ?>
              </div></td>
            </tr>
            <tr> 
              <td><div align="center"> 
                  <?php if ($user == "EMAIL") { ?>
                  <textarea name="mensaje" cols="24" id="mensaje">Aqui va su mensaje...</textarea>
                  <?php ?>
                </div></td>
            </tr>
            <tr> 
              <td><div align="right"></div>
                <div align="center"> 
                <?php if ($user == "EMAIL") { ?>
                  <input type="submit" name="Submit" value="Publicar Novedad">
                  <input name="acc" type="hidden" id="acc" value="1">
                  <input name="user" type="hidden" id="user" value="<?php echo $user?>">
                  <?php ?>
                </div></td>
            </tr>
          </table>
        </form>
      <table width="100%" border="0" cellspacing="0" cellpadding="6">
        <tr> 
          <td bgcolor="#FFFF99">LA P&Aacute;GINA WEB DEL DAMA</td>
        </tr>
        <tr> 
          <td bgcolor="#CCCC99"> 
            <p><a href="http://www.dama.gov.co"><img src="www.gif" width="80" height="80" hspace="4" vspace="4" border="0" align="left"></a>La 
              p&aacute;gina web del dama est&aacute; siendo actualizada, redise&ntilde;ada 
              y ampliada en servicios.</p>
            <p>Lo invitamos a que participe en el proceso de construcci&oacute;n 
              de esta nueva propuesta. Lea la<a href="reqrediseno.php?user=<?php echo $user?>"><font color="#666666"> 
              <strong>p&aacute;gina de fundamentos b&aacute;sicos de la nueva 
              propuesta web</strong></font></a> y haganos <a href="reqparticipate.php?user=<?php echo $user?>"><font color="#666666"><strong>sus 
              comentarios aqui.</strong></font></a></p></td>
        </tr>
      </table>
      
    </td>
  </tr>
</table>
<table align="center" border="0" cellpadding="0" cellspacing="0" width="760">
  <tbody>
    <tr bgcolor="#003399"> 
      <td bgcolor="#CC0000" width="544"><div class="Estilo14 style1" align="center">diseño: 
          alvaro moreno - desarrollo: nicolás rey </div></td>
      <td bgcolor="#fee415" width="216"><div align="center"> 
          <p><img src="midama3_files/bogsin1yellow_sml.jpg" width="120" height="44"></p>
        </div></td>
    </tr>
  </tbody>
</table>
<table align="center" border="0" cellpadding="0" cellspacing="0" width="760">
  <tbody>
    <tr bgcolor="#003399"> 
      <td bgcolor="#ffcc00" width="545"><div align="center"></div></td>
      <td bgcolor="#CC0000" width="215">&nbsp;</td>
    </tr>
  </tbody>
</table>
<table width="760" border="0" align="center" cellpadding="1" cellspacing="0" bgcolor="#666666">
  <tr bgcolor="#2656A2"> 
    <td width="65" class="Estilo56" onmouseover="this.className='Highlight'" onmouseout="this.className='Estilo56'"><div align="center" class="Estilo56"><a href="reqintranet.php?user=<?php echo $user?>"><font color="#FFFFFF">INICIO</font></a></div></td>
    <td width="75" bgcolor="#CC0000" class="Estilo56" onmouseover="this.className='Highlight'" onmouseout="this.className='Estilo56'"><div align="center"><span class="Estilo56"><strong><a href="reqnoticias2.php?user=<?php echo $user?>"><font color="#FFFFFF">NOTICIAS</font></a></strong></span></div></td>
    <td width="78" bgcolor="#2656A2" class="Estilo56" onmouseover="this.className='Highlight'" onmouseout="this.className='Estilo56'"><div align="center"><a href="reqsistemasform2.php?user=<?php echo $user?>"><span class="Estilo56"><font color="#FFFFFF">SOPORTE</font></span></a></div></td>
    <td width="102" class="Estilo56" onmouseover="this.className='Highlight'" onmouseout="this.className='Estilo56'"><div align="center"><a href="reqlegis.php?user=<?php echo $user?>"><span class="Estilo56"><font color="#FFFFFF">LEGISLACI&Oacute;N</font></span></a></div></td>
    <td width="90" class="Estilo56" onmouseover="this.className='Highlight'" onmouseout="this.className='Estilo56'"><div align="center"><a href="reqdamaweb.php?user=<?php echo $user?>"><span class="Estilo56"><font color="#FFFFFF">DAMA 
        WEB</font> </span></a></div></td>
    <td width="81" class="Estilo56" onmouseover="this.className='Highlight'" onmouseout="this.className='Estilo56'"><div align="center"><a href="reqlinks.php?user=<?php echo $user?>"><span class="Estilo56"><font color="#FFFFFF">LINKS</font> 
        </span></a></div></td>
    <td width="81" bgcolor="#2656A2" class="Estilo56" onmouseover="this.className='Highlight'" onmouseout="this.className='Estilo56'"><div align="center"><a href="reqrediseno.php?user=<?php echo $user?>"><span class="Estilo56"><font color="#FFFFFF">REDISE&Ntilde;O</font></span></a></div></td>
    <td width="72" bgcolor="#2656A2" class="Estilo56" onmouseover="this.className='Highlight'" onmouseout="this.className='Estilo56'"><div align="center"><a href="reqparticipate.php?user=<?php echo $user?>"><span class="Estilo56"><font color="#FFFFFF">PARTICIPE</font></span></a></div></td>
    <td width="78" bgcolor="#2656A2" class="Estilo56" onmouseover="this.className='Highlight'" onmouseout="this.className='Estilo56'"><div align="center"><a href="reqindice.php?user=<?php echo $user?>"><span class="Estilo56"><font color="#FFFFFF">INDICE</font></span></a></div></td>
  </tr>
</table>
<p>&nbsp;</p>
<p>&nbsp;</p>
<div align="center"></div>
<div align="center"></div>
<p>&nbsp;</p>
<p>&nbsp;</p>
</body></html>

:: Command execute ::

Enter:
 
Select:
 

:: Search ::
  - regexp 

:: Upload ::
 
[ ok ]

:: Make Dir ::
 
[ ok ]
:: Make File ::
 
[ ok ]

:: Go Dir ::
 
:: Go File ::
 

--[ c99shell v. 1.0 pre-release build #13 powered by Captain Crunch Security Team | http://ccteam.ru | Generation time: 0.0468 ]--