SkullCyberArmy Bypass Shell

Uname : Linux server1.cgrithy.com 3.10.0-1160.95.1.el7.x86_64 #1 SMP Mon Jul 24 13:59:37 UTC 2023 x86_64
Soft : Apache
Ip : 203.161.60.200
Port : 443

File Name : process_service.php

<?php
// Database connection
include '../PHP/config/db_conn.php';

// Process form submission
if ($_SERVER["REQUEST_METHOD"] == "POST") {
    $title = $_POST["title"];
    $content = isset($_POST["quill-content"]) ? $_POST["quill-content"] : '';

// Check if image was uploaded
    if(isset($_FILES["image"]) && $_FILES["image"]["error"] == 0) {
        $target_dir = "uploads/";
        $target_file = $target_dir . basename($_FILES["image"]["name"]);
        $imageFileType = strtolower(pathinfo($target_file, PATHINFO_EXTENSION));

if (move_uploaded_file($_FILES["image"]["tmp_name"], $target_file)) {
            // Insert data into database using prepared statement
            $sql = "INSERT INTO service (title, content, image) VALUES (?, ?, ?)";
            $stmt = $conn->prepare($sql);
            $stmt->bind_param("sss", $title, $content, $target_file);

if ($stmt->execute()) {
                echo "Image uploaded successfully.";
            } else {
                echo "Error: " . $sql . "<br>" . $stmt->error;
            }

$stmt->close();
        } else {
            echo "Sorry, there was an error uploading your file.";
        }
    } else {
        echo "No image uploaded or an error occurred.";
    }
}

$conn->close();
?>

Name	Type	Size	Permission	Last Modified	Actions
.	dir	-	0755	2024-03-07 07:27:40
..	dir	-	0755	2024-05-28 08:57:00
uploads	dir	-	0755	2024-03-05 09:43:46
deleteService.php	text/x-php	647 B	0644	2024-03-22 07:34:11
process_service.php	text/x-php	1.26 KB	0644	2024-03-22 07:34:11
process_update.php	text/x-php	1.57 KB	0644	2024-03-22 07:34:11
updateService.php	text/x-php	5.11 KB	0644	2024-03-22 07:34:11
upload_service.php	text/html	23.01 KB	0644	2024-03-22 07:34:12