I'm looking for a demonstration web site that shows an example of a web site that is vulnerable to command injection: where I can inject something and get the web site to run a shell command. (This is solely for demonstration purposes, to help teach others about the dangers of command injection.) Does anyone know of any demonstration web site like this?
If the location of the command injection vulnerability is not documented publicly, please describe where the command injection vulnerability is (e.g., the page and parameter that is vulnerable). I'm not looking for a puzzle to learn how to perform command injection attacks; I'm already familiar with it. Instead, I'm looking for an example that I can use to show the problem to others.