#28909 [Opn->Bgs]: php_exec_dir
| From: | edink@php.net | Date: | Thu, 24 Jun 2004 11:19:01 +0000 |
| Subject: | #28909 [Opn->Bgs]: php_exec_dir | ||
| References: | 1 | Groups: | php.bugs |
| Request: | Send a blank email to php-bugs+get-61222@lists.php.net to get a copy of this message | ||
ID: 28909
Updated by: edink@php.net
Reported By: william at activeminds dot nl
-Status: Open
+Status: Bogus
Bug Type: *General Issues
Operating System: FreeBSD
PHP Version: 4.3.7
New Comment:
php_exec_dir dir is not present in php code.
Previous Comments:
------------------------------------------------------------------------
[2004-06-24 08:48:07] william at activeminds dot nl
Description:
------------
It is possible to run commands and bypass the exec block.
Reproduce code:
---------------
$foo=
ps aux;
echo nl2br($foo);
$foo=;ps aux;
echo nl2br($foo);
Expected result:
----------------
it bypasses the exec block and excutes the ps due to the ; as bash
interupts as a new command.
------------------------------------------------------------------------
--
Edit this bug report at http://bugs.php.net/?id=28909&edit=1