We allready had thread like this, but It was deleted during attack. So
Mr_Cheese you said [script language=php][/script]can be used is some pages.
I had tryed a many combinations but I didn't suceed to use it on any page which use php. I try to write my scripts for this but none of them was working, I tired just simple form post like this:
echo "[br][form method=post action='$PHP_SELF'][input type=textbox name=testek]";
echo "[input type=hidden name=action value=1][input type=submit value=Submit][/form]";
$test = $_POST['testek'];
and I tryed get php to works from database....
So what should form look like to be vulnerable??
Hellbound Hackers is the collective work of the staff and the community and is therefore licensed under the CC BY-NC-SA license.