Description
Marcus S. Xenakis directory.php script allows remote attackers to execute arbitrary commands via shell metacharacters in the dir parameter.
References
- 4278 vdb-entry
- 20020310 Marcus S. Xenakis "directory.php" allows arbitrary code execution mailing-list
- xenakis-directory-execute-commands(8440) vdb-entry