EDB-384

functional

PHP 4.3.7 - 'php-exec-dir' Patch Command Access Restriction Bypass

view exploit source exploit_dbverifiedtype webappsauthor VeNoMouSpublished 2004-08-08catalog exploit_db
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2004-2692UShigh9.3Exploit
The exec_dir PHP patch (php-exec-dir) 4.3.2 through 4.3.7 with safe mode disabled allows remote attackers to bypass restrictions and execute arbitrary commands via a backtick opera…
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan