CVE-2000-0967

This exploit targets a remote format string vulnerability in PHP 3.0.16/4.0.2 by crafting a malicious HTTP POST request with embedded shellcode. It leverages a buffer overflow to overwrite the EIP and execute arbitrary code, specifically spawning a shell via inetd.

This exploit targets a format string vulnerability in PHP versions below 4.0.3, leveraging error logging to execute arbitrary code via crafted format specifiers. The PoC constructs a malicious HTTP POST request with shellcode to achieve remote code execution.