CVE-2015-4642

The escapeshellarg function in ext/standard/exec.c in PHP before 5.4.42, 5.5.x before 5.5.26, and 5.6.x before 5.6.10 on Windows allows remote attackers to execute arbitrary OS commands via a crafted string to an application that accepts command-line arguments for a call to the PHP system functio...

Tenable SecurityCenter PHP Character Handling (TNS-2015-09)

The SecurityCenter application installed on the remote host contains a bundled version of PHP that is prior to 5.4.43. It is, therefore, affected by an exclamation mark character handling issue in the escapeshellcmd and escapeshellarg PHP functions. A remote attacker can exploit this to substitut...

PHP for Windows vulnerable to OS command injection

Overview PHP for Windows contains an OS command injection due to a processing flaw in the escapeshellarg function. Masahiro Yamada reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Impact Specifying a specially craft...

JVN#73568461: PHP for Windows vulnerable to OS command injection

PHP for Windows contains an OS command injection due to a processing flaw in the escapeshellarg function. Impact Specifying a specially crafted parameter in the escapeshellarg function may result in an arbitrary OS command being executed. Solution Apply the patch Apply the patch according to the...

Anon Proxy Server - Remote Code Execution

By Michael Brooks Vulnerability type: Multiple Remote System commands execution. Software: Anon Proxy Server Home page:http://sourceforge.net/projects/anonproxyserver/ Affects version: 0.100 Example exploit:...

Anon Proxy Server 0.1000 - Remote Command Execution

Anon Proxy Server 0.1000 - Remote Command Execution By Michael Brooks Vulnerability type: Multiple Remote System commands execution. Software: Anon Proxy Server Home page:http://sourceforge.net/projects/anonproxyserver/ Affects version: 0.100 Example exploit:...

PHP for Windows all version shell filtering bug

Subject: PHP for Windows all version shell filtering bug Product: PHP for Windows all versions 4.3.1, 4.2.3, 3.0.17 tested with Windows 2000 SP3 all fixes + IIS Vendor: php.net Risk: High for affected systems Remote: Yes Author: 3APA3A [email protected] Intro: PHP is scripting language used...