Signature Detail

HTTP: PHP Escapeshell Command Execution

This signature detects attempts to exploit a known vulnerability in PHP. A successful attack allows attackers to execute commands by inserting escape commands due to improper input validation.

Extended Description

PHP is reportedly prone to a command execution vulnerability in its shell escape functions. This issue is due to a failure of PHP to properly sanitize function arguments. This issue might allow an attacker to execute arbitrary shell commands on a computer running the vulnerable software within the security context of the web server; potentially leading to unauthorized access. Other attacks are also possible. This issue is reported to affect PHP under Microsoft Windows version 4.3.3 and 4.3.5, it is likely that other Microsoft Windows versions are affected as well.

Affected Products

• Php php 4.3.3
• Php php 4.3.5

References

• BugTraq: 10471