php.net |  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login

go to bug id or search bugs for

Bug #28909 php_exec_dir
Submitted: 2004-06-24 08:48 UTC Modified: 2004-06-24 13:18 UTC
From: william at activeminds dot nl Assigned:
Status: Not a bug Package: *General Issues
PHP Version: 4.3.7 OS: FreeBSD
Private report: No CVE-ID: None
View Developer Edit
Welcome back! If you're the original bug submitter, here's where you can edit the bug or add additional notes.
If you forgot your password, you can retrieve your password here.
Password:
Status:
Package:
Bug Type:
Summary:
From: william at activeminds dot nl
New email:
PHP Version: OS:

 

 [2004-06-24 08:48 UTC] william at activeminds dot nl 
Description:
------------
It is possible to run commands and bypass the exec block.

Reproduce code:
---------------
$foo=`ps aux`;
echo nl2br($foo);
$foo=`;ps aux`;
echo nl2br($foo);

Expected result:
----------------
it bypasses the exec block and excutes the ps due to the `;` as bash interupts as a new command.

Patches

Pull Requests

History

AllCommentsChangesGit/SVN commitsRelated reports
 [2004-06-24 13:18 UTC] edink@php.net 
php_exec_dir dir is not present in php code.
 
PHP Copyright © 2001-2024 The PHP Group
All rights reserved. 		Last updated: Thu Sep 19 13:01:27 2024 UTC