CVE-2004-2692

EPSS 4.5%

The exec_dir PHP patch (php-exec-dir) 4.3.2 through 4.3.7 with safe mode disabled allows remote attackers to bypass restrictions and execute arbitrary commands via a backtick operator, which is not handled using the php_escape_shell_cmd function.

Affected products

n/a · n/a

public PoCs found — 1

exploitdbwww.exploit-db.com/exploits/384unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://kyberdigi.cz/projects/execdir/english.html http://seclists.org/fulldisclosure/2004/Jul/0347.html http://seclists.org/fulldisclosure/2004/Jul/0350.html http://seclists.org/fulldisclosure/2004/Jul/0357.html http://secunia.com/advisories/11928 https://exchange.xforce.ibmcloud.com/vulnerabilities/16498 http://www.osvdb.org/7243 http://www.securityfocus.com/bid/10598