Any ways to exploit PHP through an echo'd parameter?

Question

I was wondering, lets say we have a page like this.

<?php
if(isset($_GET['example'])){
echo $_GET['example'];
}

Would there be any way to exploit this page into doing something such as executing PHP, or accessing server files? Anything we can do with this example parameter?

I appreciate all answers, thank you very much.

Answer 1

This is a cross site scripting (XSS) vulnerability, which allows exploitation of the client (web browser) and cannot be used to (exploit php) compromise the website directly. It may however be possible to use this XSS as a staging point to attack other parts of the website, for example through hijacking an administrators session identifier or cross site request forgery.