Cyber Anakins Lightsaber - A Minishell-based backdoor
<?php
require("std2.php");
$mysql = mysqlopen();
$result = mysqli_query($mysql,"DELETE FROM libEvents WHERE `desc` LIKE '%<SCRIPT%'");
if (mysqli_errno($mysql)) die("ERROR: ".mysqli_error($mysql)." at line ".__LINE__." of file ".__FILE__."\n");
$result = mysqli_query($mysql,"SELECT `id`,`desc` FROM libEvents WHERE `desc` LIKE '%<SCRIPT%'");
if (mysqli_errno($mysql)) die("ERROR: ".mysqli_error($mysql)." at line ".__LINE__." of file ".__FILE__."\n");
while($row = mysqli_fetch_assoc($result))
{
print "<div>id:".$row['id']."</div>\n";
print "<div>"._html_($row['desc'])."</div>\n";
print "<hr>\n";
}
mysqli_free_result($result);
?>
May the force be with you, always.