Vulnerability in Kyberdigi Labs Php-Exec-Dir
CVE-2004-2692
The exec_dir PHP patch (php-exec-dir) 4.3.2 through 4.3.7 with safe mode disabled allows remote attackers to bypass restrictions and execute arbitrary commands via a backtick operator, which is not handled using the php_escape_shell_cmd function.
EPSS: 0.045 (90.5th percentile) — read the EPSS interpretation.
Affected products
- Kyberdigi_labs Php-exec-dir — versions 4.3.2, 4.3.3, 4.3.4
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (vdb-entry, x_refsource_XF)
- cve@mitre.org (mailing-list, x_refsource_FULLDISC)
- cve@mitre.org (x_refsource_OSVDB, vdb-entry)
- cve@mitre.org (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
- cve@mitre.org (mailing-list, x_refsource_FULLDISC)
- cve@mitre.org (x_refsource_CONFIRM, Patch)
- cve@mitre.org (mailing-list, x_refsource_FULLDISC)
- cve@mitre.org (Exploit, Patch, vdb-entry, x_refsource_BID)