CVE-2000-0059
PHP3 - Remote Command Execution via popen Shell Metacharacter Injection
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2000-0059. PoCs published by Kristian Koehntopp.
AI-analyzed exploit summary This exploit demonstrates a bypass of PHP's safe_mode by leveraging the popen() function, which fails to apply EscapeShellCmd(). It allows arbitrary command execution (e.g., 'ls' and 'id') outside the webroot directory.
Description
PHP3 with safe_mode enabled does not properly filter shell metacharacters from commands that are executed by popen, which could allow remote attackers to execute commands.
Exploits (1)
This exploit demonstrates a bypass of PHP's safe_mode by leveraging the popen() function, which fails to apply EscapeShellCmd(). It allows arbitrary command execution (e.g., 'ls' and 'id') outside the webroot directory.