EDB-20985

functional

PHP 4.x - SafeMode Arbitrary File Execution

view exploit source exploit_dbverifiedtype localauthor Wojciech Purczynskipublished 2001-06-30catalog exploit_db
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2001-1246UShigh7.5Exploit
PHP 4.0.5 through 4.1.0 in safe mode does not properly cleanse the 5th parameter to the mail() function, which allows local users and possibly remote attackers to execute arbitrary…
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan