7. OWASP
Remote Code Execution Vulnerability
Simply,
PHPCE occurs when user-supplied(GET/POST) values of the parameters
are reflected inside eval() function, that vulnerability allows attackers to
execute PHP code such as {echo system(“id”)} or any other php
function/code.