CRLF injection in PHP ftp function
We found that there was one crlf injection in php ftp ftuntion.As same as http,you can inject a 'rn other command' in the paramer of a ftp function like ftpmkdir,and then php would send the rn to your connected ftp server.The server considerd there is a new command,and the other command would be...