Report question

Question: How to demonstrate an exploit of extract($_POST)?