OS Command Injection

mikehaertl/php-shellcommand is vulnerable to OS command injection. The addArg function in src/Command.php does not escape all arguments, allowing an attacker to inject arbitrary OS commands...

Command Injection

Overview mikehaertl/php-shellcommand is an object oriented interface to shell commands Affected versions of this package are vulnerable to Command Injection. User input is concatenated with a command within addArg that will be executed without any check. Remediation Upgrade...