Command Execution

Public preview

Want everyone on your software team to learn this? Free 14-day trial.

Train my team

Have a look at the code. Since the domain parameter is not sanitized, you are vulnerable to command injection.

An Insecure Command-Line Call
PHP 
<?php
  if (isset($_GET['domain'])) {
    echo '<pre>';
    $domain = $_GET['domain'];
    $lookup = system("nslookup {$domain}");
    echo($lookup);
    echo '</pre>';
  }
?>