PHP safe mode bypass updated since 02.07.2001
Published:		25.08.2002
Source:		BUGTRAQ
SecurityVulns ID:		1301
Type:		remote
Level:		5/10
Description:		Shell metacharcters are not checked in mail command

Affected:		PHP : PHP 4.0
		PHP : PHP 4.2

Original document		Wojciech Purczynski, PHP: Bypass safe_mode and inject ASCII control chars with mail() (25.08.2002)
		Joost Pol, php breaks safe mode (02.07.2001)

Discuss:

Read or add your comments to this news (0 comments)