The exec_dir PHP patch (php-exec-dir) 4.3.2 up to and including 4.3.7 with safe mode disabled allows remote malicious users to bypass restrictions and execute arbitrary commands via a backtick operator, which is not handled using the php_escape_shell_cmd function.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
kyberdigi labs php-exec-dir 4.3.2 |
||
kyberdigi labs php-exec-dir 4.3.3 |
||
kyberdigi labs php-exec-dir 4.3.4 |
||
kyberdigi labs php-exec-dir 4.3.7 |
||
kyberdigi labs php-exec-dir 4.3.5 |
||
kyberdigi labs php-exec-dir 4.3.6 |
Vulmon