📖

PHP - RCE abusing object creation: new $_GET['a']($_GET['b'])