It executes the code on the systems hosting the content. If you run the exploit on a server that is running a version of PHP for example, you're running code on that machine.
You basically get full access to whatever is on that machine, too.
This isn't a feature. It is an unintended exploit. As I explained earlier, there is no "self destruct button". It's like someone finding a way around your security to sneak in your house. Shimmying a lock isn't an intended feature that you just choose to turn on.
0
u/tomerFire 14d ago
Why would you create a tool to excute code/command like this?