dig.php in GScripts.net DNS Tools allows remote attackers to execute arbitrary commands via shell metacharacters in the ns parameter.
- https://www.exploit-db.com/exploits/8454
No PoCs found on GitHub currently.