PHP for Windows shell characters filtration protection bypass
Published:		08.06.2004
Source:		3APA3A
SecurityVulns ID:		3737
Type:		library
Level:		6/10
Description:		escapeshellcmd()/escapeshellarg() do not work under Windows.

Affected:		PHP : PHP 4.2
		PHP : PHP 4.3

Original document		IDEFENSE, [Full-Disclosure] iDEFENSE Security Advisory 06.07.04: PHP Win32 escapeshellcmd() and escapeshellarg() Input Validation Vulnerability (08.06.2004)
		3APA3A, PHP for Windows all version shell filtering bug (08.06.2004)

Discuss:

Read or add your comments to this news (1 comments)