NVD

Id
73069  
Name
CVE-2004-2692  
Description
The exec_dir PHP patch (php-exec-dir) 4.3.2 through 4.3.7 with safe mode disabled allows remote attackers to bypass restrictions and execute arbitrary commands via a backtick operator, which is not handled using the php_escape_shell_cmd function.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2016-12-20  
Published
2004-12-31  
Modified Date
2008-09-05  
Seq
2004-2692  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
376190 73069 CVE-2004-2692 http://kyberdigi.cz/projects/execdir/english.html  View
376191 73069 CVE-2004-2692 20040708 php-exec-dir vulnerable after latest upgrade  View
376192 73069 CVE-2004-2692 20040708 RE: php-exec-dir vulnerable after latest upgrade  View
376193 73069 CVE-2004-2692 20040708 Re: php-exec-dir vulnerable after latest upgrade  View
376194 73069 CVE-2004-2692 10598  View
376195 73069 CVE-2004-2692 phpexecdir-semicolon-restriction-bypass(16498)  View

Related JVN