It's usually scripts that can write to /tmp and run unrelated stuff with web user rights. This seems more involved.