http://target.ine.local/phpinfo.php http://target.ine.local/info.php http://target.ine.local/test.php

in php login, try to add “& email” to request to the username field: username=robert&email=[[email protected]]

• php <5.3.12/5.4.2 RCE (searchsploit php cgi) (CVE-2012-1823)