CVE-2008-2051: Undefined Security Weakness

The escapeshellcmd API function in PHP before 5.2.6 has unknown impact and context-dependent attack vectors related to "incomplete multibyte chars."...

EUVD-2004-0541

PHP before 4.3.7 on Win32 platforms does not properly filter all shell metacharacters, which allows local or remote attackers to execute arbitrary code, overwrite files, and access internal environment variables via 1 the "%", "|", or "" characters to the escapeshellcmd function, or 2 the "%"...

CVE-2004-0542: Undefined Security Weakness

PHP before 4.3.7 on Win32 platforms does not properly filter all shell metacharacters, which allows local or remote attackers to execute arbitrary code, overwrite files, and access internal environment variables via 1 the "%", "|", or "" characters to the escapeshellcmd function, or 2 the "%"...

PHP for Windows all version shell filtering bug

Subject: PHP for Windows all version shell filtering bug Product: PHP for Windows all versions 4.3.1, 4.2.3, 3.0.17 tested with Windows 2000 SP3 all fixes + IIS Vendor: php.net Risk: High for affected systems Remote: Yes Author: 3APA3A [email protected] Intro: PHP is scripting language used...