Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
PHP Vulnerability - CVE-2004-0542 - Vulnerability Database
PHP

PHP Vulnerability - CVE-2004-0542

Critical
Reference: CVE-2004-0542
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2004-0542
Title: PHP Vulnerability
Overview:

PHP before 4.3.7 on Win32 platforms does not properly filter all shell metacharacters which allows local or remote attackers to execute arbitrary code overwrite files and access internal environment variables via (1) the quotquot quotquot or quotgtquot characters to the escapeshellcmd function or (2) the quotquot character to the escapeshellarg function.