shell bypass 403
UnknownSec Shell
:
/
home
/
delvin
/
dev.delv-in.com
/
views
/ [
drwxr-xr-x
]
upload
mass deface
mass delete
console
info server
name :
v_userGuideMenu_edit.php
<?php $Guide_Menu = new Guide_Menu; $access_arr = array('staff'=>'staff', 'admin'=>'admin'); $menuCrumbs = $_POST['menuCrumbs']; if ($_POST['submitBut'] == 'New'){ $action = 'New'; $menuID = ''; $content = ''; $access = 'staff'; } else if ($_POST['submitBut'] == 'Add Submenu'){ $action = 'Add'; $menuID = ''; $content = ''; $access = 'staff'; } else if ($_POST['submitBut'] == 'Edit'){ $menuID = $_POST['menuID'.$_POST['menuLevel']]; $row = $Guide_Menu->get($menuID, '', '', ''); $access = $row['access']; $content = $row['content']; $action = 'Edit'; } else { $menuID = $_POST['menuID']; $content = $_POST['content']; $access = $_POST['access']; $action = $_POST['action']; } echo " <div class='tab_box_liner'> <div class='col-12'> <h2>" . $action ." Level " . $_POST['menuLevel'] ." Menu Item</h2> </div> <form action='' method='post' name='edit'> <input type='hidden' name='menuLevel' value='" . $_POST['menuLevel'] ."'> <input type='hidden' name='menuID' value='". $menuID . "'> <input type='hidden' name='menuCrumbs' value='". $menuCrumbs ."'> <input type='hidden' name='menuID1' value='" . $_POST['menuID1'] ."'> <div class='input_form'> <table class='col-12'> <tr class='form_separator'> <td class='form_input'>"; if ($_POST['menuLevel'] > 1){ echo "<h3>" . $_POST['level1menuItem'] ." > </h3>"; } else { echo " "; } echo " </td> <td class='form_input right'> <input type='submit' name='submitBut' value='Save' class='btn btn-save'> <input type='submit' name='submitBut' value='Cancel' class='btn btn-cancel'> </td> </tr> "; if ($menuID > 0){ echo " <tr class='form_separator'> <td class='form_label'>ID #</td> <td class='form_input'>" . $menuID ."</td> </tr> "; } echo " <tr class='form_separator'> <td class='form_label'>Level " . $_POST['menuLevel'] . " Menu Item</td> <td class='form_input'><input type='text' name='content' value='" . $content ."' class='w100'> </td> </tr> <tr> <td class='form_label'>Accessible to</td> <td class='form_input'>"; $SelectObjArr = new SelectObjArr('access', $access_arr, $access, 'all users', '', "", 'edit', ''); echo " </td> </tr> </table> </form> </div> </div>"; ?>
© 2026 UnknownSec