Multibyte Shell Command Escaping Bypass Vulnerability
Wednesday, May 7th, 2008Sometimes PHP developers need execute some kind of shell commands. Sometimes these commands has user input so it is logical that there can be some security holes. To avoid such kind of security holes SecuriTeam published new article describing some PHP build in functions:
In PHP there exist two functions to escape shell commands or arguments to shell commands that are used in PHP applications to protect against shell command injection vulnerabilities.