CVE-2005-4423

This exploit demonstrates an arbitrary file upload vulnerability in PHPFM, allowing an attacker to upload a malicious PHP file (cmd.php) containing a command execution payload via passthru($_GET['cmd']). The attacker can then execute arbitrary commands on the server by accessing the uploaded file with the cmd parameter.