[ Avaa Bypassed ]




Upload:

Command:

www-data@18.188.211.44: ~ $
#!/usr/bin/perl
# download.cgi
# Output the contents of a blob field

require './postgresql-lib.pl';
&ReadParse();
&can_edit_db($in{'db'}) || &error($text{'dbase_ecannot'});
@str = &table_structure($in{'db'}, $in{'table'});

# Get the field to download
$d = &execute_sql($in{'db'}, "select \"$in{'field'}\" from \"$in{'table'}\" where oid = ?", $in{'row'});

# Work out the MIME type based on the data
$data = $d->{'data'}->[0]->[0];
if ($data =~ /^\s*(<!doctype|<html|<head|<title)/i) {
	$type = "text/html";
	}
elsif ($data =~ /^GIF89/) {
	$type = "image/gif";
	}
elsif ($data =~ /^\377\330\377\340/) {
	$type = "image/jpeg";
	}
elsif ($data =~ /^%PDF/) {
	$type = "application/pdf";
	}
elsif ($data =~ /^[\040-\176\r\n\t]+$/) {
	$type = "text/plain";
	}
else {
	$type = "application/octet-stream";
	}
print "Content-type: $type\n\n";
print $data;


Filemanager

Name Type Size Permission Actions
download.cgi File 851 B 0755
search_form.cgi File 1.31 KB 0755
view_table.cgi File 12.74 KB 0755