CVE-2009-0604

This exploit leverages a SQL injection vulnerability in PHP Director <= 0.21 to write a PHP shell to the target system, enabling remote command execution. The exploit crafts a malicious SQL query to create a backdoor shell and then interacts with it to execute arbitrary commands.