How I can inject a shell command in the below code?
<?php
if (isset($_POST['search'])) {
$res = trim(shell_exec("findstr /l /m /s \"" . $_POST['search'] . "\" archive\\*"));
if ($res) {
echo "<center>
How I can inject a shell command in the below code?
<?php
if (isset($_POST['search'])) {
$res = trim(shell_exec("findstr /l /m /s \"" . $_POST['search'] . "\" archive\\*"));
if ($res) {
echo "<center>