PHPPing 0.1 - Remote Command Execution Vulnerability

ID EDB-ID:22336
Type exploitdb
Reporter gregory Le Bras
Modified 2003-03-06T00:00:00


PHPPing 0.1 Remote Command Execution Vulnerability. Webapps exploit for php platform


A vulnerability has been reported in PHPPing that may allow remote attackers to execute commands on vulnerable systems.

The vulnerability exists in the index.php script file. Some variables are not properly sanitized of malicious shell metacharacters. An attacker can exploit this vulnerability by executing the PHPPing script and include malicious shell metacharacters as values for various parameters.|%20dir