| Triloxigen |
23-06-2004 14:19 |
[PHP] Beveiligingslek...
Citaat:
Found a issue last night while testing php_exec_dir patch
if you do the following
$blah=`ps aux`;
echo nl2br($blah);
php_exec_dir will block the call if you have set the exec_dir parm in php or apache
anyway.... if you do this
$blah=`;ps aux`;
echo nl2br($blah);
it bypasses the exec block and excutes the ps due to the ';', as bash interrupts ';' as a new cmd, ive emailed the author but no response.
|
Heb verder nog niet iets gevonden wat dit bevestigd..
php.net is er van op de hoogte..
(Ik ben dus niet de ontdekker van deze bug!) |
