command execution vulnerability in php reverse shell