Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The exec_dir PHP patch (php-exec-dir) 4.3.2 through 4.3.7 with safe mode disabled allows remote attackers to bypass restrictions and execute arbitrary commands via a backtick operator, which is not handled using the php_escape_shell_cmd function.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
php-exec-dir补丁命令访问限制绕过漏洞
Vulnerability Description
带有安全模式禁用的exec_dir PHP补丁(php-exec-dir) 4.3.2版本到4.3.7版本存在漏洞。远程攻击者可以借助backtick操作员绕过限制以及执行任意命令，该漏洞使用php_escape_shell_cmd函数时不作用。
CVSS Information
N/A
Vulnerability Type
N/A