shell bypass 403
UnknownSec Shell
:
/
var
/
www
/
html
/
views
/ [
drwxr-xr-x
]
upload
mass deface
mass delete
console
info server
name :
v_admin_testimony_del.php
<?php $Testimonial = new Testimonial; $row = $Testimonial->get($_POST['testID'], '', ''); $dispName = $row['dispName']; $message = $row['message']; $xPhoto = $row['photo']; $addedTS = $row['addedTS']; echo "<div class='col-12 input_form'> <H1>Delete Testimonial</H1> <form action='' method='post'> <input type='hidden' name='testID' value='".$_POST['testID']."'> <div class='col-12'><b>ID#: </b>".$_POST['testID']."</div> <div class='col-12 pad_top'><b>Testimonial from:</b> ".$dispName."' </div> <div class='col-12 pad_top'><b>Testimonial content: </b><br> ".$message." </div> <div class='col-12 pad_top'> <div class='col-8'> <b>Photo (optional): </b>".$xPhoto." </div> <div class='col-4 right'>"; if ($xPhoto != ''){ echo "<img src='views/images/testimonials/".$xPhoto."' width=125>"; } echo " </div> </div> <div class='col-12 top_line centre'> <input type='submit' name='submitBut' value='Cancel' class='button cancel_but'> <input type='submit' name='submitBut' value='Confirm Delete' class='button del_but'> </div> </form> </div>";
© 2026 UnknownSec