64 matches found
PHP 3.0.x < 3.0.17 / 4.0.x < 4.0.3 Error Log Command Injection
Binary data 1480.prm...
PHP 4.3.x - Microsoft Windows Shell Escape functions Command Execution
PHP 4.3.x - Microsoft Windows Shell Escape functions Command Execution source: https://www.securityfocus.com/bid/10471/info PHP is reportedly prone to a command execution vulnerability in its shell escape functions. This issue is due to a failure of PHP to properly sanitize function arguments. Th...
Greymatter v1.21d: Remote PHP command injection/execution.
Product: Greymatter v1.21d Vendor: Noah Grey - GreySoft Author: FraMe frame at kernelpanik.org URL: http://www.kernelpanik.org CONTENTS 1. Overview 2. Description. 3. How to exploit it? 4. Impact. 5. Patch. 6. Vendor Response 7. Greetings 1. Overview. Greymatter is a news/weblog tool written in...
CVE-2001-0043
Affected software: PhpGroupWare (before 0.9.7). The vulnerability allows remote attackers to execute arbitrary PHP commands by specifying a malicious include file in the phpgw_info parameter of phpgw.inc.php, due to an include/file inclusion flaw. The described impact is remote command execution ...