Anyone can execute any command on the remote system with the priveleges of the web server. Anyone can read any file on the remote system.